Snowdog: Your approach is dead-on correct. Separating CC's to specific functions both narrows down possible fraud, but also allows you to control the attack.

When you receive an email that might be "phishing", simply put your mouse over the link and let it pop up what the link is really pointing to (if your email will do that). The text you see in a link, with an underline, is simply text...it's not necessarily where the link will send you.

My advise: If your CC sends you and email directing you to log onto their site: Don't click the link. Instead, go to your browser, and manually enter the website address where you want to go (www.chase.com, www.americanexpress.com, etc) and log in. That way, you know you are going to the real site.

We've been lucky in the BVI's. No CC issues. Worst we had was attempting to use an ATM outside Bobby's years ago and the bills were stuck together, so the machine would not spit them out. We called that bank and they killed the transaction.