Would you call this a scam

[Jim Lee]

From: "Citibank" =20
| Add to Address Book=20
To: "XXXXX" >=20
Subject: Citibank E-mail Verification: =20
Date: Sat, 15 Nov 2003 20:42:46 -0500=20
=20
=20


Dear Citibank Member,=20
=20
This email was sent by the Citibank server to verify your e-mail=20
address. You must complete this process by clicking on the link=20
below and entering in the small window your Citibank ATM/Debit=20
Card number and PIN that you use on ATM.=20
This is done for your protection -- because some of our members
no longer have access to their email addresses and we must
verify it.=20
=20
To verify your e-mail address and access your bank account,=20
click on the link below. If nothing happens when you click on the=20
link (or if you use AOL), copy and paste the link into the address
bar of your web browser.=20


/?lXaKOoTx=
0tb5RWd


---------------------------------------------=20
Thank you for using Citibank!=20
---------------------------------------------=20
=20
This automatic email sent to: =20
Do not reply to this email.=20
=20
R_CODE: oOvMh5PNYM01mwTnTQyE=20
=20

[Cari MS-MVP]

Absolutely. No one should EVER ask for your PIN.

Cari
www.coribright.com

"Jim Lee" <Me @ nothere.com> wrote in message
...

From: "Citibank"
| Add to Address Book
To: "XXXXX" >
Subject: Citibank E-mail Verification:
Date: Sat, 15 Nov 2003 20:42:46 -0500




Dear Citibank Member,

This email was sent by the Citibank server to verify your e-mail
address. You must complete this process by clicking on the link
below and entering in the small window your Citibank ATM/Debit
Card number and PIN that you use on ATM.
This is done for your protection -- because some of our members
no longer have access to their email addresses and we must
verify it.

To verify your e-mail address and access your bank account,
click on the link below. If nothing happens when you click on the
link (or if you use AOL), copy and paste the link into the address
bar of your web browser.


/?lXaKOoTx0tb5RWd


---------------------------------------------
Thank you for using Citibank!
---------------------------------------------

This automatic email sent to:
Do not reply to this email.

R_CODE: oOvMh5PNYM01mwTnTQyE

[Harry Ohrn]

As Cari mentioned every bank will tell you to never reveal your PIN to
anyone so obviously this is a scam. Quite sophisticated don't you think?
This scam was featured on TV the other night. when you click the link to
"Citibank" you'll note that a link to http://klaspry.infobox.ru is run first
and then you are redirected to the Citibank site which is a legitimate site.
However the popup where you are to enter your PIN is really another site -
in this case Russian. So your number is harvested and it really seems like
you had visited a legitimate site.


--

Harry Ohrn MS-MVP [Shell\User]
www.webtree.ca/windowsxp


"Jim Lee" <Me @ nothere.com> wrote in message
...

From: "Citibank"
| Add to Address Book
To: "XXXXX" >
Subject: Citibank E-mail Verification:
Date: Sat, 15 Nov 2003 20:42:46 -0500




Dear Citibank Member,

This email was sent by the Citibank server to verify your e-mail
address. You must complete this process by clicking on the link
below and entering in the small window your Citibank ATM/Debit
Card number and PIN that you use on ATM.
This is done for your protection -- because some of our members
no longer have access to their email addresses and we must
verify it.

To verify your e-mail address and access your bank account,
click on the link below. If nothing happens when you click on the
link (or if you use AOL), copy and paste the link into the address
bar of your web browser.


/?lXaKOoTx0tb5RWd


---------------------------------------------
Thank you for using Citibank!
---------------------------------------------

This automatic email sent to:
Do not reply to this email.

R_CODE: oOvMh5PNYM01mwTnTQyE

[CWatters]

Contact the REAL Citybank immediatly to let them know you were sent this.
They will have a fraud dept look at it and it may help stop others being
ripped off.

[Bruce Chambers]

Greetings --

Yes, and a glaringly obvious and well-known one, at that.

This type of scam is called "phishing." It's been done using
bogus eBay and PayPal logos, as well.

In fact, Citibank had already warned it's customers about this
very scam, back in August, if I remember correctly, so I can't help
wondering if you bother to read all of the enclosures that come with
your statement.

http://www.silicon.com/software/security/0,39024655,10005814,00.htm


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"Jim Lee" <Me @ nothere.com> wrote in message
...

From: "Citibank"
| Add to Address Book
To: "XXXXX" >
Subject: Citibank E-mail Verification:
Date: Sat, 15 Nov 2003 20:42:46 -0500




Dear Citibank Member,

This email was sent by the Citibank server to verify your e-mail
address. You must complete this process by clicking on the link
below and entering in the small window your Citibank ATM/Debit
Card number and PIN that you use on ATM.
This is done for your protection -- because some of our members
no longer have access to their email addresses and we must
verify it.

To verify your e-mail address and access your bank account,
click on the link below. If nothing happens when you click on the
link (or if you use AOL), copy and paste the link into the address
bar of your web browser.


/?lXaKOoTx0tb5RWd


---------------------------------------------
Thank you for using Citibank!
---------------------------------------------

This automatic email sent to:
Do not reply to this email.

R_CODE: oOvMh5PNYM01mwTnTQyE

[Rob Schneider]

As others say, "scam". big time.
Fascinating details of this particular one published at
http://www.securityfocus.com/infocus/1745

Jim Lee wrote:

> From: "Citibank"
> | Add to Address Book
> To: "XXXXX" >
> Subject: Citibank E-mail Verification:
> Date: Sat, 15 Nov 2003 20:42:46 -0500
>
>
>
>
> Dear Citibank Member,
>
> This email was sent by the Citibank server to verify your e-mail
> address. You must complete this process by clicking on the link
> below and entering in the small window your Citibank ATM/Debit
> Card number and PIN that you use on ATM.
> This is done for your protection -- because some of our members
> no longer have access to their email addresses and we must
> verify it.
>
> To verify your e-mail address and access your bank account,
> click on the link below. If nothing happens when you click on the
> link (or if you use AOL), copy and paste the link into the address
> bar of your web browser.
>
>
> /?lXaKOoTx0tb5RWd
>
>
> ---------------------------------------------
> Thank you for using Citibank!
> ---------------------------------------------
>
> This automatic email sent to:
> Do not reply to this email.
>
> R_CODE: oOvMh5PNYM01mwTnTQyE
>
>