If you receive below email (That is trying to steal your information, but is a good example how to see that it is fake. Spelling mistakes. Bad graphics)
Links are going to:
khosimre.com /components/com_ag_google_analytics2 /citialert-sign_in.html
See below example.
There are several other Subject emails send, like:
Account Operation Alert
It even looks like they (The spammer) is trying this out. Several emails are received that looks similar but where having errors in it 🙂
|Citibank, N.A. Member FDIC.
© 2012 Citigroup Inc. Citi with Arc Design and Citibank are registered service marks of Citigroup Inc.