Even checking the URLs may not save you anymore, according to this article posted today:
QUOTE:
------------------------------------------------------------------------
Banking site hijacked by fraudsters
16:28 07 December 04
NewScientist.com news service
Fraudsters have used a clever web-programming trick to turn a legitimate banking site into a tool for stealing account information.
Suntrust, a bank based in Georgia, US, has fallen foul of the deception, according to web security experts who received emails designed to swindle customers.
Researchers at UK-based web-monitoring firm Netcraft received emails claiming to come from Suntrust that ask customers to verify their account information using a link embedded in the message.
But the email was not sent from the bank's own servers and the web page it linked to contained extra characters in the URL address line - added on to the bank’s legitimate web address. So, while the page was hosted by the bank’s servers, hackers had overlaid it with altered elements to give the appearance of a legitimate “Account Verification” page.
Decoding these altered elements revealed a link to an alternative server controlled by the hackers. Customers entering their account information onto the overlaid page were inadvertently sending their details to be recorded by the hackers’ web server.
Netcraft engineer Paul Mutton says the "phishing" trick is made worse because it exploits the bank’s own site. "As far as the user is concerned, they are visiting a legitimate site," he says.
----------------------------------------------------------------------
More info here:
http://www.newscientist.com/news/news.jsp?id=ns99996770