The tricky bit about this scam is the hiding of the sender. The real sender of the message is not in the message's 'from' field. It contains only '"US Bank" <customer-service>', and not an e-mail address. And since e-mail clients retrieve sender name from the 'from' field, it is highly likely that the potential victim will remain unaware of the real sender.
This trick could be exposed by looking at the 'return path' header of the email message, where the true sender is listed.
The message is well designed and could be persuasive, too. The link is, of course, 'masked': |
