Spoof pages pose online security risk for banks

I'm actually surprised that this isn't a much larger problem. I am a pretty tech-savvy guy, and yet I have nearly been fooled several times by these phishing scams. The worst ones are the PayPal scams, some of which I would still swear are legitimate:

An online security firm is warning that three UK banks are failing to ensure their websites are protected from ‘phishing’ scams (BBC Online). Heise Security claims Cahoot, Bank of Scotland and First Direct are leaving themselves open to the potential theft of online customer identity.

Link: Scottish Business Briefing – October 24