There are two ways that people can mistakenly give away their password. First is like you mentioned with these phishing links. Second is accidentally putting your password in the memo line when initiating a transfer. I don't have much on here, but even if my account was compromised I would be pretty upset.
You can always try to recover it. The problem is that many people are having these SBDs holdings in their accounts and they can be transferred anywhere anytime.