Good video showing how a phishing attack can bypass 2FA security.
Original Article: https://techcrunch.com/2018/05/10/hacker-kevin-mitnick-shows-how-to-bypass-2fa/
PREVENTION:
Before logging into any important website (crypto exchange, financial account, email account, etc), examine the domain name shown on your browser, and make sure the spelling is correct.
This helps, but it's certainly not foolproof. If you're tired or in a hurry, you could be fooled by a typosquatting or homograph attack.
Stay safe :)