I feel I'm fairly immune to traditional phishing because I never click a URL in an email. If namecheap sends me an email saying one of my domain names is about to expire, I don't use their "Renew Now" link I go to "namecheap.com" (not hard to type), log in, and renew the name. Banks and other organizations that send long complicated links in emails and encourage people to click them are part of the reason phishing is possible. These emails should look like:
Dear John Doe,
An automatic payment has been made from your checking account:
04-May-2014 $125.00 to Big Energy Utility Corp
For more details, please log on to your online banking account and click the "Recent Transactions" tab.
There is no need for hyperlinks in any of that.