Two days ago, I got an email that purported to come from Air Canada saying that here is my reservation, here is the reservation code (in the 6 alphanumeric format Air Canada uses) and your credit card was charged $438.60. To get your receipt, click on the following web site (it started with communications@www.AConline.??? (either com or ca, I don’t remember). This was almost convincing, but a call to Air Canada (35 minutes on hold) got me the information that they had received several thousand calls about the same reservation code. I also called the credit card company (10 minutes on hold) to find that no charges were recorded.
It’s been around for at least 2 years.
Interesting. I forwarded it to my sysop who replied that not only was the return address spoofed, but so was the link. He told me that if I hovered the cursor over the link it would reveal the true link, which appeared to be a cafe in Florida. You live and (sometimes) learn.