[MD Expat in PA]

How can you know someone has not hacked mail and built a dummy site to capture passwords?

Never ever click on a link embedded in an email even if the email looks legitimate. Instead go to the URL that you have booked marked for logging into your account.

I do all my bill paying on-line and get email reminders when bills are due. I never use the link in the email however to get to the account log in page.

[Sequoyah101]

I too make that a habit but thank you for a very good bit of advice.