Just logged into my American Express account and found out about this:

They are surely getting more and more elaborate...

Then AmEx goes into explaining what phishing is, and I think this explanation is something that some merchants could use to communicate about phishing to their customers. Here it goes:

Short and clear. Hope other merchants find this of help too.