Imagine receiving an email from your bank asking you to verify your account details urgently, or a message from what looks like your software provider