Be careful with any texts of emails that you didn't ask for or trigger. I've been getting bombarded since the week before Thanksgiving with Venmo password reset notices, and now I'm getting emails saying I have new credit reports available and to log into services I have never used. All of these are blatant phishing attempts, botted out blindly or via scraping data of public account info (thanks Venmo).
I already know one friend's husband was entirely compromised last month to the point all his bank and card accounts had to be shut down and reset due to a phone phishing scam and social engineering. The problem is widespread and with the ease of clicking, it's incredibly easy to lose account control before realizing a message or email was a bot phishing run.
Don't use the same password for everything, don't give anything out via phone and stop clicking blindly on links.