Picture this: You post photos online from a trip to Brazil. The next day, an email arrives from the hotel where you stayed, thanking you for your visit and offering a special discount on your next stay. The email references your recent trip, the hotel's name looks right and the link looks legitimate.