Props to him for talking about it. A lot of people get too embarrassed to tell anyone they got scammed. The reality is that phishing works on a ton of people and we should avoid shaming the victims. Everyone's acts like they're a digital security expert until their credit card gets stolen.