Totally not off topic.
Also, note that phishing does not happen in just emails. It happens from some of your malicious friends as well. I've had friends attempt to steal my passwords and whatnot. Just make sure you recognize the domain/URL, make sure it's the proper website, yada yada...