Some hackers exploited two factor authentication recently by playing on this exact impulse.

Sent a message that looked identical to the two-factor notice and got people to reflexively turn over their private keys.