As Treasurer for a not-for-profit company, I keep getting crap emails trying to convice me to click their link to update our account, prove I'm me, change my PIN, etc.

Yeah, right, asshats. We don't even have an account with the bank you claim to represent.

I really enjoy reporting these to the fraud/spoof deparments at the real institutions they mimic. The latest was an Italian version of Citibank - found the .it domain buried in the full headers.

I can't believe people actually fall for this shit.