We have private messaging in some Hive dapps so that can be used to confirm who someone is and is hard to fake unless they already lost control of that. As you point out there are red flags like asking you to log in somewhere new and saying it's urgent. We have to be careful.