Yeah, I get a shitload of these and even fell for one once a long time ago, before this was so common and well known. The one that got me was supposed to be from Paypal. It looked totally legit and said something like "there's been an unauthorized attempt to access your account, please log onto your account to change the password" They gave me a link which actually was to Paypal.

The thing was that when you clicked on the link, it would somehow send all your information to whoever sent the e-mail, not just to Paypal. Next think I know there was like a thousand$ spent. I got it all back but it sure as shit taught me lesson.

The bottom line is never access any website, that you have an account on, through a link in an e-mail. No matter how legit it looks. Instead, close the e-mail and go to the website manually.