so it works like a phishing scam?