I’m sure we all get phishing spam–especially the spam from banks. I just got another one, from the German American Bank, in Jasper, Indiana (that’s where the bank’s central offices are; I doubt that’s where the spam is from):

We have been notified that a card associated with your account has been reported lost or stolen. Therefore, as a prevention measure, we have temporarely [sic] limited access to sensitive German American Bank account features.

Unless the German American Bank is a lot bigger than I thought, this doesn’t make much sense. Why not use a mega-bank, like Bank of America, to maximize the chances that the target of your spam actually has an account there?