How are regular people suppose to avoid phishing emails when legit companies send such sketchy emails?