You're checking your inbox or scrolling through your phone when something catches your attention. It's a message about a password reset, but you never asked for one ...