These scum will stoop to any level for a quick buck. People have to be so careful as it's easy to be caught out. I really recommend using a password manager like Lastpass as that won't supply your passwords if the site URL is wrong, but even so there may be cases where even that can be fooled.