I have even gotten emails saying it is from the USPS, just click delete and log in directly if necessary. I read a techie article that said the vast majority of problems now are not from spam emails but from hijacked websites. Now the hackers can imbed fake links on a real website, kind of like the skimmers they can mount on the gas pumps.