. "In other cases, a legitimate-looking e-mail directs the recipient to a phony website that tries to get the recipient to reveal his or her user name, password, and other personal and financial data." . . . .