They aren't always so blatant, sometimes they are very subtle, like the one below:
Yes, this one was a nasty one. I know some guys who fell for it sadly. That's why you must use bookmarks to access these sites. I have bookmarked and also my password manager won't show a match unless the site URL is exactly same, so I have two ways to verify that I am on the correct site.
Also, NEVER click an email link from the exchange, ignore the link visit the Exchange using your usual method and do what ever you want. If you are unsure, visit the Telegram group/twitter to verify that the email is legit.
Be safe guys!