The only advice I give now is: If you're contacted and think it might be genuine, go direct to the website. Don't click anything.

I suspect it's the only reasonable advice now?