Nobody's gonna get my address, phone, or financial details or correct birthday from Facebook or Linked In or anywhere else, because I never put them IN there. They can have my name, an email that works but isn't my primary personal one, and a long-shot pic of a woman playing a harp.

You can still keep your private info off sites like these, which will greatly reduce (though probably not eliminate) your vulnerability to the internet. Also, of course, using different passwords for each thing - mine are long humongous non-words peppered with numerals.

But mail and delivery companies, whose purpose is to physically transport items to your house, get spoofed because they often do use email as a pre-communication system. (I had a genuine one this morning.) What they don't do is ask you to click links. And if they're legit, they'll have some sort of website, or at least a listing on business pages like Yelp, so you can contact them independently if in doubt.