Probably because YouTube allows purchases of various stuff. A phishing link could likely easily be made to look exactly like YouTube
This is a common pattern to see today. Lots of examples that maintain the same CTA design (don't leave us. Don't waste your money on scammers, waste them on us please)