They could've sent me a confirmation link since the email was linked but the login credentials were the fraudsters (couldn't reset via email). Though that obvio

They could've sent me a confirmation link since the email was linked but the login credentials were the fraudsters (couldn't reset via email). Though that obviously has issues as well. I'm not entirely sure, but there was no way I was going to give out sensitive information (imo) to a website that I'm not familiar with. Even at the time I was trying to get support, It felt like the company wasn't even legit. No great answer here. Maybe escalate to a manager and have a more involved conversation.