For those unaware, spoofed emails can be very convincing and taken for legitimate without you knowing it was spoofed. Spoofed addresses can be made identical to official MG addresses on the surface. Only when you closely inspect the message headers of an email you received, can you tell whether it's legitimate or not. So if in doubt, or if the email contains a link asking you to log in, just delete and ignore it.

Another thing I strongly advise anyone who received a phishing email from MG, is to check if your email address has been exposed in a data leak. Generally, email addresses stay hidden in a website's database unless a leak has happened. This doesn't mean that MG had a data leak (we'd know by know), but it is very likely that your address has been leaked elsewhere and that scammers are just fishing (phishing) for someone who does happen to have an account here. Aged accounts with positive ratings are likely very very lucrative for scammers as they can easily list some modules for cheap, scam several users out of their money and disappear just like that.