Plan a great vacation — and don’t take a phisher’s bait.