Search our Spoof Library...
Another Spoof Email and Phishing Scam report by - click this image to go to our home page.

CITI_CARDS E_MAIL Verification -
24th July 2004

please forward any scams you've received to

Report Summary
Date Reported
24th July 2004
Apparent Sender
Return Address
CITI_CARDS E_MAIL Verification -

Submitted form data on spoof webpage is forwarded to a local script.

Bogus Web Content?
URL of web content*20020%2eD%61%2ER%55

(Traced to a server in New York, USA)

which is disguised in the email as:


Traced to a server in Moskva, Russia


1. Spoof official looking Citi popup webpage requests bank details which are captured and sent to a local script.

2. The real Citi home page is loaded in the background by the script on the bogus page to make the bogus page appear more authentic.

3. The page linked to by the email is embedded with a script that redirects the browser window several times before reaching the final destination

4. The email contains only an image and a link. By embedding the 'text' of the email into an image, scammers are able to slip their emails past email scanners that can easily real text but have no idea of the content of an image, thus reaching a larger potential audience.


" Dear Citibank member, This email was sent by the Citibank server to verify your email address."...

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.


The Spoof Email ...

The Spoof Webpage (pops up in front of real Citi webpage)...

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the web site.

Click the arrow to return to previous page



Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide