I think that’s the genius of the scam. “We’ll never ask for your password. And we’re not asking for your password. This is just a one-time authentication token

I think that’s the genius of the scam. “We’ll never ask for your password. And we’re not asking for your password. This is just a one-time authentication token. Your password is safe!”