The phishing email directs you to call a phone number with an automated response system. Enter your PIN and you're owned.
http://www.zdnetasia.com/news/security/0,39044215,39355262,00.htm