Warning: Clicking random email links used to be my normal routine

Ever see someone learn the hard way? My buddy clicked a link in an email that looked exactly like his normal streaming service login. It was a fake page that grabbed his password. He only found out because his bank called about weird charges. Took him like a whole week to get his stuff sorted and change every password he had. Now he hovers over every link first to see the real address. That stuff changes how careful you are for good.