Have you heard of clone phishing?

It’s done by cloning a message. But it’s a classic instance of phishing!

It works like this: You receive an e-mail message from a company you are in regular contact with and trust. Shortly afterwards you receive a second copy of the same message but this time with a note from the sender telling you about additional recipients or requests for information. This second message now contains a link to a page where for instance you are invited to enter your personal data and information about your debit or credit card. This often purports to be merely a request to update the internal database, and includes an assurance that everything will be treated in confidence. It relies on the gullibility and credulity of the cardholder.

You can find out what you can do to guard against phishing here.