That is outrageous! So then it means, her losing all her SBDs had nothing to do with how much secure her password was. We assume she did not give the password to anyone. What she did was opened some links and then later on, she couldn't open her account anymore.
I think the most important thing for all of us to remember is to not open links, especially those that look questionable or suspicious.
You got it right! Some links are scammers!