"Open the developer tools and paste this into the JavaScript Console" is far less effective as "paste this into your address bar" as far as phishing schemes go.

"Open the developer tools and paste this into the JavaScript Console" is far less effective as "paste this into your address bar" as far as phishing schemes go. At least, in my experience. YMMV.