Yes, we have to be extra careful.

I've got an email address solely for registration purposes at multiple sites and services and I receive spam, scam and phishing on a daily basis /if not hourly/.

I see a trend this is all perhaps targeted to mobile users as on a desktop it is harder to them to hide the real URL of the link, it's usually seen when hovering the links. Of course I never click on if the URL is different than the original website.

Another telltale sign is the lack of the "anti-phishing phrase" that many of the crypto service providers set personally with each user :-)