The
Computer Guys, a monthly feature on
Kojo Nnamdi's talk show on WAMU radio, today mentioned
this test of one's ability to recognize
phishing email. (I got 9 out of 10. And I dispute the one I missed. It may have been legit when the test was created, but now the alleged domain of origin is up for sale. That's not a message to believe.) Anyway, this quiz should give you an idea of whether you're too trusting of what's in your mailbox.
One's choice of tools sure makes a difference. I read email with a text-only mail program that (when requested) lets me see the full headers and any underlying MIME/HTML. This makes it much easier to spot links to bad places. In this test you can see only the pretty GUI-fied message. No wonder it's so easy to fool people.