I just had a fishing attempt from someone I know, and the phisher had set the reply-to address to be a different account. I initially did not notice because the To line for reply does not show the email address by default.
It would be good if there was a warning that the reply-to is different than the From address.