# I have an e-mail scammer's IP address: what should I do with it? **URL:** \ **Category:** In My Humble Opinion\ **Created:** [September 1, 2004, 2:53pm UTC](https://boards.straightdope.com/t/i-have-an-e-mail-scammers-ip-address-what-should-i-do-with-it/262585 "2004-09-01T14:53:25Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![DirkGntly](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@DirkGntly](https://boards.straightdope.com/u/DirkGntly)\ **Post date:** [September 1, 2004, 2:53pm UTC](https://boards.straightdope.com/t/i-have-an-e-mail-scammers-ip-address-what-should-i-do-with-it/262585/1 "2004-09-01T14:53:25Z")
I received this e-mail message today: \*CITIBANK® Dear Citibank Customer: Recently there have been a large number computer terrorist attacks over our database server. In order to safeguard your account, we require that you update your Citibank ATM/Debit card PIN. This update is requested of you as a precautionary measure against fraud. Please note that we have no particular indications that your details have been compromised in any way. This process is mandatory, and if not completed within the nearest time your account may be subject to temporary suspension. Please make sure you have your Citibank ATM/Debit card and your login details at hand. To securely update your Citibank ATM/Debit card PIN please go to: Customer Verification Form Please note that this update applies to your Citibank ATM/Debit card - which is linked directly to your checking account, not Citibank credit cards. Thank you for your prompt attention to this matter and thank you for using Citibank! Regards, Customer Support ©2004 Citibank. Citibank, N.A., Citibank, F.S.B., Citibank (West), FSB. Member FDIC.Citibank and Arc Design is a registered service mark of Citicorp.\* Now, I KNOW this is a scam because Citicorp would never ask for my PIN. Period. But there was a clickable link in the e-mail message and I was able to get the IP address of the server hosting the “Customer Verification Form.” My question is, what should I do with this info? Is there someone to report this to? Or, better yet, ask all of my friends, relatives, Dopers, etc. to constantly ping their IP addy… Any suggestions? (Also, would posting the IP address and URL be against the rules??) ---
**Author:** ![Alan\_E\_Sheets](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@Alan\_E\_Sheets](https://boards.straightdope.com/u/Alan_E_Sheets)\ **Post date:** [September 1, 2004, 3:21pm UTC](https://boards.straightdope.com/t/i-have-an-e-mail-scammers-ip-address-what-should-i-do-with-it/262585/2 "2004-09-01T15:21:52Z")
trace route the IP address, identify the ISPs and NSP involved, and email abuse@XXXXX.xxx and report a malicious spam violation coming from that IP. Request that that IP be shut down. > [@DirkGntly](#): > > I received this e-mail message today: > > \*CITIBANK(R) > Dear Citibank Customer: > > Recently there have been a large number computer terrorist attacks over our database server. In order to safeguard your account, we require that you update your Citibank ATM/Debit card PIN. > > This update is requested of you as a precautionary measure against fraud. Please note that we have no particular indications that your details have been compromised in any way. > > This process is mandatory, and if not completed within the nearest time your account may be subject to temporary suspension. > > Please make sure you have your Citibank ATM/Debit card and your login details at hand. > > To securely update your Citibank ATM/Debit card PIN please go to: > > Customer Verification Form > > Please note that this update applies to your Citibank ATM/Debit card - which is linked directly to your checking account, not Citibank credit cards. > > Thank you for your prompt attention to this matter and thank you for using Citibank! > > Regards, > > Customer Support > > (C)2004 Citibank. Citibank, N.A., Citibank, F.S.B., > Citibank (West), FSB. Member FDIC.Citibank and Arc > Design is a registered service mark of Citicorp.\* > > Now, I KNOW this is a scam because Citicorp would never ask for my PIN. Period. But there was a clickable link in the e-mail message and I was able to get the IP address of the server hosting the “Customer Verification Form.” My question is, what should I do with this info? Is there someone to report this to? Or, better yet, ask all of my friends, relatives, Dopers, etc. to constantly ping their IP addy… > > Any suggestions? (Also, would posting the IP address and URL be against the rules??) ---
**Author:** ![SuperNelson](https://avatars.discourse-cdn.com/v4/letter/s/7feea3/32.png) [@SuperNelson](https://boards.straightdope.com/u/SuperNelson)\ **Post date:** [September 1, 2004, 4:10pm UTC](https://boards.straightdope.com/t/i-have-an-e-mail-scammers-ip-address-what-should-i-do-with-it/262585/3 "2004-09-01T16:10:16Z")
Citibank has a whole staff of people that combat fraud, and phishing attempts like this. Their home page ([http://www.citibank.com/us/index.htm](http://www.citibank.com/us/index.htm)) has a consumer alert link which asks cardholders to immediately forward these emails to them: > [@](#): > > When you report fraudulent e-mails that appear to be from Citibank but which are, in fact, sent by imposters, we work aggressively with law enforcement agencies to investigate them. > > If you suspect that you’ve received a fraudulent e-mail, please forward it to us immediately at: > > [emailspoof@citigroup.com](mailto:emailspoof@citigroup.com) > > Note: Don’t change or retype the subject line—this inhibits our ability to properly investigate it. After forwarding the e-mail, you should delete if from your inbox. > > You may also want to forward it to the Federal Trade Commission at: > > [spam@uce.gov](mailto:spam@uce.gov) > > or contact them at: > [www.consumer.gov/idtheft](http://www.consumer.gov/idtheft) > 1-877-IDTHEFT