Here’s what happened — and how to protect yourself from similar scams.