So I received a new CitiBank scam email today.

Here is an image of the email I received. You can click on the thumbnail below to see a larger version of the image:

How do I know it was a scam email?

[More:]

First: The line with the web link - To unlock your account, please your account - makes no sense, it is grammatically incorrect.

Second: If you moused over the hyperlink without clicking on it the target address of the link was - h__p://catalina-aguilar.com/privado/about.php?aKhDyHaEFot [more.....] - this is NOT a CitiBank related web address. [link has been modified to not work]

Here is the text of the email minus the html formatting:

This is a
Security Alert you requested to help you protect your account.

Your account has been blocked.
You have exceeded the number of three (3) failed login attempts.

To unlock your account, please your account

Thank you for your cooperation.

Sincerely
James Frazier




This e-mail is intended only for the use of Citibank, N.A., Member FDIC

Citibank.com is the source of information about and access to domestic financial services provided by Citibank retail banking and the Citigroup family of companies. Citibank, N.A., Member FDIC. Citibank Credit Cards are issued by Citibank (South Dakota), N.A.

In addition to the mistakes in the email itself, if you take the time to see where the email originated from you will see that the sending IP address is managed by Turk Telecom.

inetnum: 88.246.64.0 - 88.246.127.255
netname: TurkTelekom
descr: TT ADSL-meteksan dinamik_aci
country: tr
admin-c: TTBA1-RIPE
tech-c: TTBA1-RIPE
status: ASSIGNED PA
mnt-by: as9121-mnt
source: RIPE # Filtered
role: TT Administrative Contact Role
address: Turk Telekom
address: Bilisim Aglari Dairesi
address: Aydinlikevler
address: 06103 ANKARA
phone: +90 312 313 1950
fax-no: +90 312 313 1949
e-mail: abuse@ttnet.net.tr

So if you happen to get this email, it is a SCAM don't follow the link - just DELETE IT.

Dave