I fell for an eBay phishing email once about 10 years ago. I am usually pretty savvy about that sort of thing but maybe I was in a hurry, I don’t know. They tried to buy a Rolex using my account and then tried to sell like a ps2 or something (which I assume did not exist) and eBay shut that shit down FAST. They were like um, the most expensive thing you have ever purchased was $34. We think this is not you. So I had to go through the mess of changing every password on everything and haven’t had issues since. But ugh, that was annoying. I don’t click through on emails now. If I see an email from my bank/eBay/etc telling me I need to look at something, I will go to their page myself.