This is an absolutely awesome spam message:
“This email was sent by the Citibank server to verify your E-mail address. You must complete this process by clicking on the link below and entering in the small window your Citibank ATM/Debit Card number and PIN that you use on ATM.”
It would take someone with the brains of rotting cabbage to actually go to the web site and fill out their credit card number. Then you know they’ll call Citibank (the real Citibank) a week later and complain about those mysterious four-thousand-dollar charges against their card.
The sad thing is, scams like this must work. Otherwise they wouldn’t exist.