I think if the scammers have your email address for an account they say they’ve forgotten the password on the log in screen. That’s when the pin number gets sent over to your actual email address while you’re on the phone to them and you give it to the scammer thinking they sent it to you as a security check. Once they have that pin they can reset your password to whatever they want. That’s how they take control of people’s accounts for things such as social media. Not sure if it’s how they can get into your online banking as well.
Problem is once they’ve changed your password they can even go onto the account settings and change the email address for the account.
Problem is once they’ve changed your password they can even go onto the account settings and change the email address for the account.