Yes but the fake site requested the 2fa code, to be honest it was a pretty well constructed attack. Like I say it was all done in less than 15 minutes, I acted pretty quickly but they still got the funds out.