This clever banking scam keeps phishing by faking its own demise – how it works