Have you ever been the victim of "phishing"? This is emails that spoofs banks or another company, and they send you a link to a "lookalike" company form so you can send your banking accounts, etc. These emails usually have a threat included like closing your account if you don't enter the information immediately (or the like).

Well, today I just found a Citibank email in my email box, telling me to send my banking account info in or they will close my account. They even made the email look like it is really from Citibank, even the subject heading looked real.

Want to know how I know it's fake? First of all, most companies do NOT ask for your personal information by email, so I know it is risky sending it through the Internet. I do not feel comfortable sending my personal accounts in a link to a fake form that is supposed to be from that company.
Second of all, I NEVER USED CITIBANK! That was a red flag to me that they are trying to scam me when I never had an account there. LOL They are wasting their time with me.

So to report this, I looked up the real Citibank website and found the email addresses to report spoof emails like the one I just had.....so I forwarded it to both email addresses, and then just deleted the email.

Did any of you been through this? What did you do about them?

Well, it's all really just common sense. Obviously if you do not do business with City Bank, any messages they send you are bogus. Alot of the time they pick on senior citizens who do not really understand. Nancy is right, it pays to be on your toes.

Yeah I get this lot with ebay and paypal when I get fake email for either of them, I fwd them to spoof@ one of those site depending on the content.. as for other like citibank, they already ended up in my junk mail folder waiting to be deleted.. It is just that I always report to either ebay or paypal on any spoof or phising emails since I am member of both. I don't bank at Citibank anymore either.

FYI the top 4 companies being used for phishing are:

Citibank
Earthlink
eBay
PayPal


Here's a sample phish email:

--------------------------------------------------


Dear EarthLink Subscriber,

According to our records, the VISA associated with
your EarthLink account #[fake number deleted] is about to expire.

To ensure uninterrupted service and avoid a possible
reactivation fee, please update your credit card information
right away (or as soon as your replacement card arrives in
the mail).

You can easily verify/update your credit card information on
your "My Account" Web page:

http://[fake url].earthlink.net

You can also update your credit card information by calling
1-888-EARTHLINK and using our automated phone system. Select
the option for "billing" and have the following information
ready:

* The phone number associated with your account
* The credit card number you wish to use, including
the expiration date
* One of the following -- your email address, password,
secret word, or PIN

We value you as a subscriber, and appreciate your prompt
attention to this matter.

Sincerely,

EarthLink Accounts Receivable

************************************************************
This is an Administrative Message from EarthLink. It is
not spam. From time to time, EarthLink will send you such
messages in order to communicate important information
about your subscription.
************************************************************




the phone # IS correct, but if you had clicked on the link, it would have taken you to the fake site. HOWEVER, if you had typed in the URL yourself, you would have gone to the correct site. Very tricky. If you ever think you're at a fake site, go back and type in the url yourself. Many phishing email are also in html. If your name isn't on the email, that it is obviously fake. Besides, legit email never askes for visa #'s.

Just say no!