So today I'm looking through email and see an email from one of the loan companies with something about a 1098-E (1098 is interest you paid for those who don't pay attention to taxes). Didn't think much of it other than I'll reference it in a couple weeks. Then I figured, wait a second, that address doesn't look quite right. I figured can't be, nobody would be that stupid. Yep, they outsourced and had the company send out the email directly. And yep, follow that link and the first thing they ask for is SSN and to answer a CAPCHA. I'm pretty certain it's legit based on the fact it went to a unique address for them, but as a matter of principal... I wonder if they link to them on their web site. If not I think I may have to call them and ask for a real one and if they refer to the email only say I got one that looks like a fraud. I seriously hope nobody actually uses that link, but unfortunately most people probably do. :(