[Gandalf Parker]

Atrocities said:

Oh man, those kind of scams are far harder to detect and a lot easier to fall for. If not for the fact that I did not have an account with Washington Mutual, I too may have fell for a simular scam.

I guess the crux of the situation would be to consider every email suspect until proven lagit.

I hope your co-worker was able to change everything before they could act upon the information they were deceived into providing.

Whenever a thread breaks out about how to tell if its real or not I tell people DONT TRY TO TELL. Yes I can still read the headers and spot the falsehood in it because I fairly well know http protocol. But they do get harder and harder to spot. So my stance is NEVER click an email link for things like that. Always go manually to the site and look for the link you need.

For that matter conisder it for phone calls also. You should have a rule that you never give ANY personal information to anyone who calls you. You should manually look up the number and call the company.