Phishing scams are getting brutally effective, and even technically sophisticated people can get fooled. Here’s how to limit the damage right away, and what to do next.