Phishers aren't just Nigerian schoolboys any more. They're getting reasonably sophisticated: Three factors almost hooked me: I actually am a CIBC (credit card) customer. Always delete any "security message" from a financial institution where you don't have an account. The URL (in dark blue text) looks like a genuine CIBC website (www.cibconline.cibc.com/...