It was because the OP fell for a scam message and provided their password and PIN to a phishing site.