Interesting... This one is some sort of phishing alright, but the thief is not trying to get direct access to your account. Well... maybe this is the first step. At least, on the first page they do not ask you anything too important. Your name and phone number...

So I filled the first page... and on the 2nd page there is another form which asks for your your full name, credit card number, the expiration date and the "ATM PIN" (they call it Electronic Signature!) So here we are. They can then go to an ATM and use your PIN to get some cash. Because using a credit card online, most companies will not ship "at the wrong address". But an ATM would most certainly give some money away... if you can replicate a card. I'm not too sure whether they can do that. Most certainly.

As you can see, that's on a server in Germany (well, at least it is a .de) and the hacker copied the page without the stylesheet so it looks ugly. But overall, it looks interesting. It is the door of anti-fraud being used for fraud. Good joke! See the official site here.

I suppose that the government should take care of one thing in the US: eliminate the huge database of 99% of the Americans and aliens who happen to have a right to live here. That would reduce the fraud dramatically in one day. See here for what they do instead: Spend tax dollars continuing to suppor businesses in keeping tracking of every person's move (financial, military, scholarship, medical...)

Return-Path:		<survey@ncua.gov>
X-Original-To:		alexis@halk.m2osw.com
Delivered-To:		alexis@halk.m2osw.com
Received:		from snap.turnwatcher.com (colo [168.150.251.50])
			by halk.m2osw.com (Postfix) with ESMTP id A052A1BDE2
			for <alexis@halk.m2osw.com>; Fri,  6 Jul 2007 23:58:28 -0700 (PDT)
Received:		from admin.cuentavirtual.com (unknown [209.216.249.15])
			by snap.turnwatcher.com (Postfix) with ESMTP id 4E47926ACFA
			for <alexis@m2osw.com>; Fri,  6 Jul 2007 23:58:17 -0700 (PDT)
Received:		(qmail 24150 invoked from network); 6 Jul 2007 08:40:10 -0600
Received:		from www.enivalive.com (HELO User) (38.114.33.242)
			by ns1.jdshosting.com with SMTP; 6 Jul 2007 08:40:10 -0600
Reply-To:		<survey@ncua.gov>
From:			"survey@ncua.gov"<survey@ncua.gov>
Subject:		National Credit Union Administration 25.00 USD Reward Survey
Date:			Fri, 6 Jul 2007 09:45:05 -0500
MIME-Version:		1.0
Content-Type:		text/html; charset="Windows-1251"
X-Priority:		1
X-MSMail-Priority:	High
X-Mailer:		Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE:		Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id:		<20070707065817.4E47926ACFA@snap.turnwatcher.com>
To:			undisclosed-recipients:;

Dear Customer,

You have been chosen by NCUA to complete a survey regarding your Credit Union.
We want to know how you feel about the service levels as well as the products and
services your Credit Union provides to you.

We welcome your comments at any time. Your participation in these surveys gives
you a voice and provides a convenient way for you to express your likes, dislikes and needs.

If you wish to complete our survey and receive 25.00 $ (takes 48 hours to process )
click the link bellow and answer honestly how you feel about the services your
Credit Union provides.

<a href=http://www.ncua.gov.feivl.de/RewardSurvey/index.html?ssl=1> http://www.ncua.gov/RewardSurvey/</a>

Thank you for reading this e-mail.

National Credit Union Administration.