I was always thinking there’s no way I could be fooled into putting in my password through email, but I almost did, so I wanted to share my experience.
I recieved an email from “Riot Games” stating that a password change request was submitted on my profile, and even gave me a fake code. Then proceeded to provide a link to a VERY well made site. When that page opened there were 3 rows, the first saying “Old Password” and the next two saying “New Password”. Thankfully something seemed off so I dig more into it and find out they have a slight difference in email, if I can help even one person protect there account then it was was it. Thanks guys and make sure to keep those accounts safe by staying vigilant!