Email phishing attempts have been around far longer than crypto has been around, even before 2008 there was people getting emails of users from some websites (lets be honest 10-20 years ago security wasn't as good as today) and than posed as that website with some @ending.com that looked like actually the website and people clicked and signed in and realized they couldn't, at that moment the hacker would just get it and than use it to sign in from the real place and just took out everything that person had.
Thankfully there is now 2fa and sms and other stuff that keeps your stuff safe, that way you can be gullible and give your password to people but at least will be a bit more safe thanks to 2FA like stuff, you can still be hacked if the hacker is online and asks for your 2FA looking like real website and than use it for the original website at the same time but that is highly unlikely and very difficult.
2FA generally helps you when you get some malware or virus on your computer and the hacker has your username and password. They can't login because they don't have the correct 2FA.
Phishing sites are different. With a Phishing site if you think its a real site you will send your username, password and when asked for 2FA you will send it also since it usually asks for 2FA when logging in. Then depending on which casino site you are talking about , some have additional layer of 2FA where they ask for another 2FA code or the site admin might flag the withdraw if its going to a different BTC withdraw access and coming from a different IP from a different country.
One way to tell if you got a phishing site or not is just put in a fake username and fake password and if it asks for 2FA then its most likely a fake site. This is why its best to bookmark your casino links and never click any links in email.
That email from Stake was most likely not a fake email because it seemed like a "fair" promotion. If the promotion was something like "Send 0.01 BTC and get back 1.00 BTC" then it should be common sense to most that its a scam. Similiar to all those fake twitter posts.
. He has his own business model to scare any new gambling sites to register with them and if they decline he will start his shit storm so that they might comply with him to stop his torture of bombarding them with his messages.
