Today I received notification from Firstbanks that my Firstbanks Internet banking account was about to expire. This was an easy phishing email for me to spot, even without Thunderbird telling me that it thought that the email was a scam, since I don't use Firstbanks for anything. If you take just a minute to actually read the email, it just doesn't sound right or read right. There are grammar errors and the improper English use as well as missing words in the message body.

Here is an image of the message I received:

[More:]

Here is the text of the email I received:

FIRST
BANK

As a Firstbanks customer, your privacy and security always come first. We have been dedicated to customer safety and protection, and our mission remains as strong as ever.
We inform you that your Firstbanks Internet banking account is about to expire. It is strongly recommended to update it immediately. Update form is located here.
However, failure to confirm your records may result in account suspension.
This is an automated message. Please, do not reply.

Sincerely, Firstbanks administration

If you click on the link in this email it actually takes you to 68.254.188.8, not a Firstbanks website.

This IP Address appears to be part of the AT&T DSL ?? pool.

AT&T Internet Services SBCIS-SIS80 (NET-68-248-0-0-1)
68.248.0.0 - 68.255.255.255
PPPoX Pool - Rback6 MILWWI.461124 SBC06825418800023040721191341 (NET-68-254-188-0-1)
68.254.188.0 - 68.254.189.255

In any case, a bank would not send you to an unencrypted, a web site using http:// instead of https://, IP Address to update your information.

This is just another attempt to gather your personal information so someone can access your financial resources. As always, if you receive a message like this, don't reply to it, just deleted it.