Those of you with CitiBank accounts may be receiving an email asking you to go to a web page (for which a link is provided) and sign in with your usual credentials. The fake website is VERY authentic looking, but it's spoofed. The fake website is
here. Looks pretty real, no? But it's as fake as can be. Remember, banks will
NEVER send you an email asking you for your account info.
BTW, the link above is really this =>
http://isapi100.info/index.htm
EDIT: Thanks to
BBA at Xtremepc for pointing out that it's the popup that's the scam. I use a popup blocker, so I never saw it.