First it is a letter from "Bank of America" (firstname.lastname@example.org - already that's a far cry above the eBay scam emails I get that come from like, email@example.com or whatever) telling me that my online banking account is frozen because there were too many failed attempts to log in. Then it says like "Need up to the minute account information? Sign in" and the link goes here. Okay, the address at the top is a giveaway but a lot of people wouldn't notice that - even the links to the right go to the real pages at the BoA website.
I had to mention this. I was tipped off immediately cuz I don't even bank at BoA (lol) but I was amazed and I pictured people like my parents (some of the most un-internet savvy people to ever use the internet) totally falling for this.
So, if anyone gets this, beware! And, if anyone knows who made it, tell them I said solid attempt!