You may already know this but you can forward the message to the real financial company being spoofed by typing "spoof@_________," and filling in Citibank.com, etc.

I think the companies appreciate the chance to find out who's sending these.

Thanks.

JB