Fighting fraud by baiting phishers