I received a phishing email that appeared to come from Google, that almost had me convinced. I was in a delicate place--my father was fighting cancer, and my brother had just been horribly injured in a motorcycle accident. I was distressed, and my wits were not about me. The link in the email was to a google.com url, it looked okay.
Luckily I detected the treachery before sending any sensitive data, and I sent the relevant details to the Google bug bounty. Their response was that google.com open proxies are not considered bugs, and the report was closed. Do less evil, Google.