Once or twice, I've clicked through on a link in an email that was convincing enough to fool me, and what saved me both times was that I run NoScript.

It's so frustrating just standing by and watching as we descend into a low-trust society.