The phishing "impersonation" problem is something that is very hard to deal with from a technical perspective. Impersonation can take many forms, e.g., just a name in the body of the message, a personal name associated with the sender, or an external address that looks like it belongs to the person being impersonated. It's up to the recipient to review the email for legitimacy. For more information visit the Information Technology webpage on phishing.