Happened to my father who got routed through ads on his phone while booking flight tickets to some seedy website. He regretted it but thankfully got refunds initiated successfully because of issues with the flights themselves and a lot of back-and-forth. He resolved to only do critical monetary operations on his laptop where I've installed any and every possible adblocker.

The web is so hostile to the inform and the old. It takes one moment of weakness and there's someone ready and waiting with a scam.