This type of phishing scam is common as dirt, but this example is particularly lame. First, it includes the sections of CitiBank’s standard notices that would normally include the account holder’s name and the last 4 digits of the account — but they’re blank. Then there are some typos. But the really lame part is that the links at the end (Contact Customer Service, View Our Privacy Statement, Add Us to Your Address Book) point to americanexpress.com
Subject: CitiBank Account Alert
CitiBank Account Alert – Personal Security Update
Dear Citi Bank member,
To protect your account(s), we need you to re-authenticate your account by updating your Personal Se curity Details. For authenticate your identity please click on the following link.
http://online.citi.us/US/JPS/serverstack/action?request_type=75629812604 . (link leads to http://www.ecoles.mc/online.citibank.com/US/JSO/signon/LocaleUsernameSignon.dolocale=en_US.html)
Due to concerns, for the safety and integrity of the Citibank account we have issued this warning message. It has come to our attention that your Citibank account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. .
Thank you for your Cardmembership.
CitiBank Customer Care
Contact Customer Service (link leads to http://www.americanexpress.com/Tracking?mid=CASEUPSW0001005C96900389B51EA03A&msrc=MYCA&url=https://www.americanexpress.com/messagecenter)
View Our Privacy Statement (link leads to http://www.americanexpress.com/Tracking?mid=CASEUPSW0001005C96900389B51EA03A&msrc=MYCA&url=http://www.americanexpress.com/privacy)
Add Us to Your Address Book (link leads to http://www.americanexpress.com/Tracking?mid=CASEUPSW0001005C96900389B51EA03A&msrc=MYCA&url=https://www212.americanexpress.com/dsmlive/dsm/dom/us/addustoyouraddressbook.do?vgnextoid=46c001cc1e65b110VgnVCM100000defaad94RCRD)
Your Cardmember information is included in the upper-right corner to help you recognize this as a customer service e-mail from CitiBank. Using the spam/junk mail function may not block servicing messages from being sent to your email account. .
Copyright 2012 CitiBank. All rights reserved.
Here’s what it looks like: