"that call would be highly regarded by an end user as genuine"
Um, it's very likely that it would have been regarded as genuine anyway.
Just this week I got an email posing as from Amazon Prime, nicely alerting me to the fact that my automatic renewal had not gone through and click here to allow us to take care, or I would incur some additional renewal fee of €59.
Initially, the only thing that bugged me was the "additional" renewal fee. I thought to myself : huh ? There is no renewal fee on Prime ! Then my brain kicked into gear and I checked the link and, sure enough, it did not go to any domain registered by Amazon.
Finally, I logged onto my Amazon account and checked : my Prime subscription is in December.
Nice try, guys. For a tenth of a second, you caught me compliant. But that link would have given you away anyway.
But that's only because I always check the link. 90% of people don't (and that's more like 99.9% probably).
So good on Google for correcting the issue. Now someone tell me that changes anything in the Luserverse.