You never shared an OTP, didn't scan any QR code, and didn't even click any suspicious link. And yet, scammers managed to ...