Nice post! Learned this the hard way when my dad clicked on a link that looked like it was from his bank. What a mess. I set up two-factor authentication on all his important accounts after that. Hope it helps.