A fake web domain that obtained personal information was used to steal millions of dollars from unsuspecting people. Here’s ...