That is right but they are also using page restrictions like hiding the status bar and disabling the right click menu, really easy to do that. However, that should also start the alarm bells ringing, unfortunately the people who are likely to get hit are unlikely to know any of these precautions.