I was phished last year. A site claiming to be one of my credit card companies said that they needed me to update my account. The logo and everything was identical to the cc acct. I almost fell for it until questions such as "What is the account number where you finance your car?" and "What is your debit card account number?" etc. appeared. No way my cc company needed that info. I didn't know if this was taking place in real time or not so I immediately clicked out and went to my bank, let them know what happened and I closed the account. It could've been disastrous.