Now, please present a list of these to your grandmother, and ask her which ones are phishing, and which are legitimately from the government.

Now, present the same list to an I.T. professional with the same questions. Perhaps make sure they are not carrying any weapons before you try.

This is just one reason why visual inspection of URLs and "hover over this link" haven't been useful defenses for a long time.