Johnny's experience sounds like a very real experience. Alas, netizens are susceptible to phishy attacks when they are not looking.

I have drawn lessons from this. Confidentiality aids security.