The notification sat in the inbox like a glitch in the matrix, a digital sore thumb amidst the usual spam for cryptocurrency and counterfeit watches.

Sites may ask for logins to steal your credentials.