If you use MobileMe or .Mac here's an important article forwarded from Jim Hamm. He explains the problem, "If anyone, or any company, or any bank, sends you an authenticate-looking email asking for a credit card #, delete that email and move on is my recommendation."