Fresno lost $400,000 to a phishing scam in 2020 and never told the public