 And they don't have two-factor authentication enabled. So if you have two-factor authentication enabled, which I'm guessing you didn't on this account, that is what's going to protect you from... Even if you gave up your password by accident, what happens is you get a notification that says, hey, there's something wrong with your Facebook account. There's something wrong with your Instagram account. And you go, what? No, no, no. What do you mean? And you click that URL. You log in without thinking. And that URL is actually phony.