Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.

http://207.202.89.91:87/f/formslogin.htm

1. Email claims to be from Halifax asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.

2. Halifax never send users emails requesting details in this way.

3. Spoof URL disguised by an image in the body of the email which contains the text - a technique used to get past spam filters.

4. Spoof website not online at time of report - possibly it has already been disabled, but stay alert! When online, likely to resemble the real Halifax page at www.halifax.co.uk

5. A very common scam with many variations currently in circulation.