Of all of Outlook's manifold flaws, perhaps the worst is that, when you are reading an email and you roll over a link, it doesn't show you the URL. Every decent browser shows you the URL in the status line, as do reasonable mailreaders like Mozilla. That Outlook doesn't do so by default (and so far I haven't found an option to *make* it do so) makes it quite a bit harder to be certain of whether something is a phishing attack or not...