The email he received in his daily list had the catchy title of "No sign-up needed: Manage your money online." But David Passell did the sensible, careful thing. Instead of clicking to open the possible phish he went on-line directly to the Credit Union website. Better to be suspicious than to automatically open all the email you receive.