Sarah, a working mom, fell victim to a phishing scam that cost her over $2,000. The email appeared to be from her bank, leading her to a fake website where she unknowingly shared sensitive information. How could this happen? What happens next?