Tried to log into a fake iPhones iCloud. Using my phone number and my email. Didn’t not buy it. What’s the worst that can happen?

Went to buy an iPhone but I figured out it was a scam when I tried to login to my iCloud what’s the worst that can happen? I used a hotspot to give the phone internet.

Anything I can do after the fact? Say harden passwords or a different way to verify my accounts?

Maybe they could use a combo of my phone number and Gmail to get into something of mine?