BT
BT encourage phish-prone behaviour by sending out regular emails with links to their site, requiring you to log in to see your bill.
Once they have established that habit, it makes it very easy for the phishers.
I have long sent requests to their customer service bit bucket for an option to put a bill summary in the monthly email (as talktalk do now) - that's all I (and probably most people) need to see (to check nothing is amiss), and then they won't bother clicking on links. I don't consider my monthly bill total sensitive data that cannot be sent by email.