No matter how good malefactors are at pretending to be the real deal, you can still spot travel phishing if you know these three simple rules.