Report: Americans lost $40B to phishing scams in 2022