On a related note, I know someone who tried installing an authenticator app for 2FA. They searched on the apple app store for such an app, they may even have searched for "Google Authenticator" although I'm not actually sure, and chose the first one. Although there are free quality apps for TOTP authentication, the first result required a rather expensive yearly subscription. Again, it isn't technically a scam, because as far as I can tell they provide a real service, but it is also clearly designed to trick unsuspecting users into paying way more for something than they should.