Earlier this week I got (half) phished by the most convincing phishing email I have ever seen. It was supposedly from PayPal telling me that there may have been unauthorized access to my account (that'll motivate you to click the link!). Clicking the link took you to a site that looked exactly like PayPal where they prompted you to login and then told you that you needed to verify your credit card information as part of a periodic security check. All the graphics were right. The tone of the writing was right. The only tip-offs were: the actual URL of the site once you got there and the fact that the email wasn't addressed to me by name. Apparently all legitimate PayPal emails are addressed to you by name. I've forwarded the email to PayPal and changed my account password and secret questions. Phew. Be careful out there! (I tried to post a screenshot of the site but Hello was having none of that.)