I'm a security engineer and I still almost got scammed