A single mistake cost one user nearly half a million dollars, highlighting how scammers are escalating phishing attacks.