I recently started to use the "neo-banks" (fintech apps that may or may not be actual banks, mostly for payments). All of them offer an app and APIs and ways to

I recently started to use the "neo-banks" (fintech apps that may or may not be actual banks, mostly for payments). All of them offer an app and APIs and ways to discover which contacts use the same app via their phone number. Immediately following this I received highly targeted phishing sms messages that included links to plausible looking login pages. Perhaps this shouldn't be too surprising, but people will get burned and somebody will have to pay for it.