A buddy of mine got her Discord account hacked by someone doing this. They gave her another Discord user who was playing as an employee. To “prove” the account was hers she had to change the validated email to something they sent. She mentioned something about it and then I and another person in IT started freaking out.
All in all it was fine and she got her account back. I think she was just embarrassed. I think it’s the first time she’s ever had someone try to do something like that. Me and the other person who caught it were trying to reassure her that we noticed it because we’ve had to do so many IT trainings and phishing tests over the years.for work.