I consider this a serious bankcard fraud threat.
Please note the below email. I personally received it today, seemingly from Citibank (except for the poor grammar.) The hyperlink does go to the actual Citibank website. However, it also displays a popup dialog box, in the Citibank style, that prompts for one's ATM card number, PIN number and date of expiration. THE POPUP IS NOT FROM CITIBANK. I was able to trace the IP address, (194.85.33.241) to an Internet Service Provider (ISP) in Russia.
I reported this to Citibank and they told me that other banks are experiencing the same problem. Obviously, if you receive a similar email, DO NOT provide the personal financial information requested.
=========================================
Dear Citibank Member,
>
> This email was sent by the Citibank server to verify your e-mail
> address. You must complete this process by clicking on the link
> below and entering in the small window your Citibank ATM/Debit
> Card number and PIN that you use on ATM.
> This is done for your protection -- because some of our members
> no longer have access to their email addresses and we must
> verify it.
>
> To verify your e-mail address and access your bank account,
> click on the link below. If nothing happens when you click on the
> link (or if you use AOL), copy and paste the link into the address
> bar of your web browser.
>
>
>
http://www.citibank.com:ac-Pir4nKdrp...HOPfPdEzFzoY1u