Comment by someoneeestis

But that's the thing, they have the money to have people chasing down the official channels of whatever email that comes from to confirm their authenticity.

Cybersecurity 101: Call back the bank at the official number and all that yada yada.