Exactly. I fell for an email link one once because I was stressed and tired and thought I had indeed forgot to pay an internet hosting bill. They spoofed my whole internet providers website, very realistic. It's easy to miss the red flags if you aren't being careful even for a moment.