It really doesn't matter how obvious it is if you follow the easiest rule of not getting scammed: - If anyone initiates contact with you, don't trust any claim

It really doesn't matter how obvious it is if you follow the easiest rule of not getting scammed: - If anyone initiates contact with you, don't trust any claims they make about their identity. If you only trust real law firms, verify that independently with whatever authority determines which law firms are real. People need to stop using "can make a professional-looking website" as a proxy for "not a scammer".