They keep saying again and again that they will 
never ask your password by mail. And there is 
still people that do it, it seems...

By the way, the "From" field (sender) of a mail 
can be set to anything by anyone. It's absolutly 
not checked or protected in anyway.
If you want to know if a mail is really coming 
from somewhere, you should check the "Received" 
lines and see if the original sender IP is really 
belonging to whom it claims.