It’s not just pictures.

Sending a text link to a phone is as common way to allow changing a password. The thief will try sites like Amazon, local banks, anywhere where they can get or easy things to sell.