The BBC covered this today. Here’s a Clue: don’t use HTML for email. Look at any links you are sent in emails very carefully before loading them in a browser – not at the text used to display the link, but at the actual address targeted. Disabling the display of HTML in your email client should reveal this information to you. You should already be doing this anyway if you’ve been paying attention to the recent phuss about phishing.