Legitimate website: You have an alert. Log in to see it.
Me: *consults password manager* *tries to log in*
Website: No, not that one.
Me: Forgot password.
Website: *sends reset password email*
Me: *resets password*
Website: You have to include a special character.
Me: *tries again*
Website: But not that one.
Me: How about this one?
Website: All green! Have you notice the tempting Submit button at the bottom?
Me: CLICK
Website:
Website:
Website:
Website: I'm not going to tell you if anything is happening.