YOU are your own best defense against a phishing scheme. If someone sends an email asking for stuff like that, it's best to contact the REAL bank, creditor, etc. and let them know. This kind of thing adversely affects their business, as well, and they like to know aboutit.