I've got 2FA and the whole shebang activated so there's no way I'd ever do this with my own consent as I'm well aware of the scams scumbags try to pull on others, but damn, this is sad he lost his $85k.
Personally, when I receive important emails I double check the address they were sent from and I don't click on the link provided on the email message, rather I log in to the account and check it out just to be safe.