Good advice is to never click links in emails, but go manually to a given page (via Google perhaps) and log in yourself.
It's a bit easier if your family lives outside of English-speaking country when it comes to phishing. Phishing spam is either English, or a poor google translate 95% of the time.