The page loaded instantly. A perfect clone of her streaming service’s login portal. She typed her email—the same one she’d used since college—and her usual password. Then came a second screen: “Verify your device: Smart TV (Samsung, Living Room).” That made her pause. She didn’t own a Samsung TV. But the form offered a dropdown. She selected “Other,” clicked confirm, and was told: “Verification complete. Thank you.”