Good thing you caught that and was suspicious
Your self created password does not expire !!
Only temporary login passwords sent to you from the website do this, and they are only sent , After you verify who you are, because you forgot your password
I get phishing emails and texts every week, supposedly from banks to fix some error, I DON'T have any accounts with those banks,
The scammers buy email addresses list, and then send out their phishing attempts,
Use an auto text program pick and area code and send out scam texts to All possible phone numbers ,
With 7 numbers after the area code that about a million phone numbers, even just one exchange prefix the last 4 numbers provide a chance to send out thousands of scam texts
Or robot calls