Not entirely related, bu if you want to get your paranoia up a bit, go to https://haveibeenpwned.com/ and pop in your email address. It will tell you if that address has been part of a known data breach, and where it was compromised from.

Genuine website.

Apologies to all from #15 onwards ... I hadn't checked for further replies until today.
Some excellent advice offered and I shall try to follow it. Re the Nexus, it is switched on only for verification nowadays and switched off immediately afterwards. As regards telephone verification, I don't have a mobile phone and the landline has no text facility :ugh:
Artee - done your suggested PW check and clear ! :D