Warning: Citibank email scam

[Sanjoelo]

Just received this via email a few minutes ago:

Dear Citibank Member,

This email was sent by the Citibank server to verify your e-mail address. You must complete this process by clicking on the link below and entering in the small window your Citibank ATM/Debit Card number and PIN that you use on ATM. This is done for your protection -r- becaurse some of our members no longer have access to their email addresses and we must verify it.

To verify your e-mail address and access your bank account, click on the link below. If nothing happens when you click on the link (or if you use AOL)Y, copy and paste the link into the address bar of your web browser.



http://www.citibank.com:ac=C6jrm11O7cOGHuUeYK1C@ifD8d.pIsEm.NeT/3/?i8tiCf7JNzIpF4T


3---------------------------------------------
Thank you for using Citibank!
5---------------------------------------------

This automatic email sent to: xxxxx@xxxxx.xxx

Do not reply to this email.

R_CODE: URd6TTNdM3by4NRd6cPl


Granted, only an idiot would actually enter their card number and pin (check the spelling of "because"), however the link does actually go to something resembling the Citibank site (but check the URL--it contains "@ifD8d.pIsEm.NeT"). Just thought I'd pass this along.

EDIT: Citibank actually has a warning on their main page regarding this.

-JB

 

[Engineer]

CitiBank Warning! :|

 

[Morpheux]

OT: Citibank contacted me a week ago with info that my card number was being used and come to find out, someone else IS using my card. They notified me within 12 hours of the first questionable charge. They were great on the phone and I have been very happy with their services.

 

[TTM77]

Notice that it doesn't sound very offical or professional? sound more like a salesman trying to force you to buy/do something.

"You must do it NOW NOW NOW NOW NOW...and NNNOOOOWWWWWW!!!!"

Now I don't even call the number they leave on my answering machine. I just call the # on the card.

 

[M0NEYSH0T]

Perhaps these are the unethical clowns that are pulling this scam...

Registrant:
CJSC Publishing house RosBusinessConsulting (PISEM2-DOM)
78, Profsouznaya st.
Moscow 117393
RU

Domain Name: PISEM.NET

Administrative Contact, Technical Contact:
CJSC Publishing house RosBusinessConsulting (35544600O) hosting@rbc.ru
78, Profsouznaya st.
Moscow 117393
RU
+7 095 3631111 fax: +7 095 3631125

Record expires on 19-Nov-2004.
Record created on 03-Sep-2002.
Database last updated on 29-Sep-2003 12:47:43 EDT.

Domain servers in listed order:

RELAY.MAILRU.COM 80.68.244.2
RELAY1.MAILRU.COM 194.186.36.181

 

[devilboy215]

hey... anyone with java script skills want to try to decipher the script on this page and see where it's sending the information? this is the page that the pop is on? http://ifd8d.pisem.net/3/welcome2.html i don't know java script

i also did some investigating and found this page http://ifd8d.pisem.net notice the same domain and subdomain. you have to stop it before it automatically forwards you to an error page. in case you don't stop fast enough it's a fake paypal page. the one where you update your profile

screenshot taken... but no where to host it... looks like this person is into scamming people.

 

[alrocky]

I don't even have their card and I got that bogus email.