These people are still at it. I went to purchase something; got a text providing an OTP code - supposed to be from Bank of Americas but it "just didn't look right." Sure enough, not from BofA and it would have given access to Google Pay! Dodged the bullet on that one.