Earlier this year the church community was subject to an email phishing scam that was purportedly from me! It wasn't. This scam involved social engineering. No accounts were hacked but the scammers created an account that looked like it could have been mine and they gained access to our online directory (which is available to anyone with an Elvanto user account). Needless to say, I've been much more aware of online security since then!
I find the advice of Josh Summers on 'All Things Secured' very helpful. This article and the video below offer very simple and practical steps you can take to help prevent yourself from becoming the victim of a phishing attack. It's advice some people in the church took and saved a lot of people a lot of grief! Of course, this doesn't just apply to church related communications but any potential scams you may face.
You can read the article here.