Doc Searls has a useful post on brandjacking.

I no longer keep, much less answer, email from my bank (which, to keep from making things worse, I won’t name). Nor from any other bank. Nor from eBay or PayPal.
Except for their Web sites, all those companies have had their brands hijacked on the Net by Phishers and Pharmers.