"Phishing scams" that steal "IDs and passwords" entered when using EC sites are rampant. We approach the reality of the clever trick.