原推：New phishing technique?
Submitting a form with shady link on your behalf.
Receipt is sent from a legitimate Google address, so bypasses spam checks and drops in inbox.
This one was clearly conspicuous, but I could see how a refined version might work.
Be careful out there!
