I've had loads of them, and it's funny the different tricks they try to use. They've gone beyond just the 'details confirmation' or the 'we're doing a hardware/software update' routine. I've had phising e-mails warning about phising e-mails and asking people to log into a fake site (seriously). Even got an e-mail one asking to respond to the from address with details, those scammers get low marks for effort there - they didn't even try to bother setting up a fake site.
If hadn't deleted them at the time, I'd post the text they used.
Despite that, some can be more convincing than others. I've even mistaken legitimate contact for phising. I once spent over £1000 on my Egg credit card one morning (the joys of an annual Travelcard for commuting into London), and I got a robot calling my work phone saying they're from Egg and need to confirm a transaction. Then it asked me for my card number and other details to be entered over the phone keypad, at which point I hung up. I guessed that it was probably legit, given it occurred exactly after I signed a receipt for a four figure sum (and it's not often I do that!) but still was cautious.
Fair enough them wanting to confirm such as large amount, but it was a silly way of doing so IMO.
I sent them an on-line message confirming I had spent that amount of cash (not through choice though), and if they had wanted to confirm a transaction a human should have phoned me and why did it need my details as they'd already have them. Not that you can trust a human much more than a bot I suppose, but still. Even if they'd rather save money by using a bot, I don't know why it didn't just say "This is Egg, please could you phone us on x regarding a recent transaction", and of course I would have verified x was the actual contact number, and rung them. Still think it was silly for a bot to request personal information out of the blue, when of course it could have been anyone.
They just acknowledged it was legit (and no doubt ignored what I said about their policies I guess).
