Yes, this is a classic scam vector. We really should stop training users to click links / call phonenumbers in sms and emails.