How does this happen? A completely systemic plague of bot profiles spreading phishing attacks with malicious links, and some of them actually can engage in conversation to an extent that if someone wouldn’t really know what to look for or telltale signs of it, would certainly fall into a trap. Make signing up more secure and a wee bit harder than the current state of “just a email and password will do”.