membership with sans is free and thier newsletters are all about security. turning off all clientside scripting support also helps defeat this crap. not using ms outlook / outlook express also reduces the risks. with the numbers of people in the community that use paypal, knowing paypal has at least one group targeting thier customers for phishing expiditions can help avoid getting caught.