A security minded friend furthered my paranoia by suggesting it might be a case of cheap fifa coins xbox and academic spear phishing