Wednesday, April 14, 2004

I was poking around on Google looking up the address that "Citi-online" email links to . (It points the victim to a redirect service in Moscow.) While I was looking, I found the Antiphishing.org website. Think of this as Snopes for email scams.


If you have any doubts about an email you've received, check here. You may not find the exact scam, but you'll likely see something similar. Many phishing scams are very well done, despite the poor Engrish. These Citi-bank scams send you to Citi-bank's site but, there's a pop-up window over the top that isn't from Citi-bank; the "litlle winddow". I had another a few days ago that was a very well done replica of a Paypal page (Similar to this scam.) on a Korean webserver. That one, as a finishing touch, sends the victim off to the Paypal.com 404 page after grabbing the info. In short, be suspicious of what comes to your inbox!

This has got to be the funniest scam email I've ever received...


_Dear Citi-bank Cardholder,

This Email was sentt by_the_ _Citibank serevr to verify _your_ E_MAIL adrress.
You must complete this process by clicking on_the__link beloww and entering
in the litlle winddow your Citi_Bank _Debit card_number and PIN that
_you_use on local_Atm_Machine. This_is _done_ for_your protection becaurse some of our
members members have access to their _e-mail_ adderss_ and we must verify it.

http://citi-bank-online.org/?385586164247

To verify your_ EMAIL_ addres_ and akcess _your_ _citibank
account, klick on__the_link beloww.


I've sure that it was much more convincing in the original Russian.