It actually sounds like she was given a login to the phishing site, which then proceeded to request her Gmail address & password. That would be a good example

It actually sounds like she was given a login to the phishing site, which then proceeded to request her Gmail address & password. That would be a good example of how, for many people, when a trusted authority asks you to do something you are less likely to question it. ...he indicated that the material that he had prepared was ready for my review and that his assistant would be sending to me login information to a website that was not yet live online. And I received the login information -- this is all the first week of April -- and I logged in, and I put in -- as requested -- I put in my e-mail address and then put in my password.