Someone at a forum we used to got successfully phished us some 11 years ago. He lead us to a page which looks like Gmail and then collected our passwords. No one realised until he revealed himself. And claimed he deleted all the collected data.
That was an eye opener for all of us.
