This happens all the time, it's a classic phishing tactic.