https://christianheilmann.com/2026/02/22/i-fell-for-a-phishing-attack-and-lost-access-to-my-x-account-here-are-five-mistakes-i-did-that-you-need-to-avoid/

“I was in the middle of the reset-your-password dance with verification across different devices when the phishing mail came in.”

They play the odds.