So you get emailed a usually pretty obvious fake website, you are asked to login, and if you login you leak your password! Surely nobody would fall for this!