Watch out! That payment request might be fake