[dearrifling]

That's true for any email, not just phising. Unless you can verify and trust all senders.

[Kalium]

Yup. This is why people are taught not to click links in emails for things like banking. It's a dangerous world out there, even for seemingly innocuous things.