" We are sending this verification notice to provide you with information about how Citibank safeguards your privacy, as well as to comply with U.S. federal privacy guidelines that apply to financial institutions such as Citibank. "...

This spoof Citibank email (see image below) is in HTML format (although it does look like a text only email in order add a sense of authenticity to the link text). The link in the email has been disguised using HTML code but will actually lead your browser to a bogus Citibank page which requests your card number and PIN (see image below).

Any information submitted is processed through a PHP script located on the same server as the bogus content.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

The Spoof Email ...

Citibank Notification

Dear citibank customer,

At Citibank, we value the trust you have placed in us by using our service to conduct your transactions.
Because our relationship with you is financial in nature, the protection of your privacy is particularly
important to us.

We are sending this verification notice to provide you with information about how Citibank safeguards
your privacy, as well as to comply with U.S. federal privacy guidelines that apply to financial institutions
such as Citibank. The full terms of Citibank's privacy policy are available on the Citibank website, which you
are welcome to review at any time.

Please verify your account information by clicking on the link below:
Verify your accounts here

The bogus web page ...