Phishing is hard to spot. So it's best to be safe and cautious at all times.
With phone phishing the best practice is to never give out infomation to anyone who calls you. Even if they say they are from your bank, insurence company or whoever. If you think you will need to give details out over the phone then make sure it's you who've called the official number of the company you want to contact.
E-mail phishing is more common and harder to deal with.
Most companies will never request personal infomation via E-mail. If you do get an E-mail that looks genuine be cautious. Never click on the links or reply to it. Open your web browser and personally type the website address for that company. DON'T copy and paste links to your browser.
If you think you may have been a victim of phishing then contact the organisation for which you have been phished from and let them know your concerns.
Lloyds TSB Phishing examples
Phishguard
