You can't emphasize enough the danger of clicking on links in a email.
(and any links in this message could be malicious -- don't click on anything here!)I occasionally have fun decomposing a
phishing email. I know it's phishing because they're asking for account information at a site that I don't have an account, or information I know they don't need, or just because I'm suspicious.
For example, I just got an email asking me to update my eBay account info. It had an eBay and even a Trust-e logo on it and a link that
read https://arribada.ebay.com/saw-cgi/eBayISAPI.dll?PlaceCCInfo. However, when I clicked on the link, it finally failed saying it couldn't connect to 82.165.244.14 and in fact, the full link was to
http://82.165.244.14/82.165.244.14/hiena.info/aw-confirm/login.html.
The first link is a perfectly legitimate eBay registration page and if you paste it into your browser, will work as you expect. The second one is where you would end up if you clicked the link. By the time I clicked it, this link failed; probably because it's been shut down. Other phishing links I've followed have landed somewhere in China.
The rules are:
-- Don't open an email from someone you don't have a relationship with.
-- If they are requesting account information, be suspicious. Don't click an attached link, use your usual login procedure.
-- When you get to a login or account information page (especially anytime you're about to enter personal or financial information), check the browser's address bar to be sure the site starts http
s and the lock at the bottom of the browser window.
-- Login the first time with a ficticious name and password. If you get through, you're being scammed.
-- Check your financial statements promptly and challenge anything questionable.