The problem begins the moment you click the link inside the email. Attackers frequently send emails that look almost identical to legitimate password reset notifications from well-known services. The ...