The best defense against spoof (fake or phishing) emails is to be educated and informed about how to spot them. eBay has a good tutorial on how to protect yourself, as does Stop-Phishing.com from the University of Indiana. Number one tip: when visiting a site in response to an email that asks for some web action, do not click on the link in the email. Instead, navigate to the company site independently, either by looking it up in a search engine, or getting the URL off a billing statement.
More posts like this one in Anti-Virus.
