I know I have.
It's not fun, is it? I didn't lose much, as I was one of the 'lucky' ones.
Think about how your bank account. Your work email. Those, too, can be stolen by a simple misclick.
Only trust websites you've used before, or:
This has been a PSA...