I had a simillar story. I never fall for these tricks, but this one from PAYPAL was SO convincing, that I clicked on the link, and put it my name and password. But just before I pressed 'enter', I decided to add a few letters to my password. I then pressed okay, and lo and behold it "logged me in" to update my credit card details!

Chony