Phishing scams imitate the standard login but also include requiring your PIN at some point.