(copied from another post)

Do not click eht blue words in the email message as the message tells you to. Instead manually tgo to the web site of Citibank or whomever. Should tyhere be no warnings on the real web site you went to manually, you can assume everything in the email message is false, you won't be cancelled, you won't be charged a late fee, you do not have to revalidate, etc.

Other useful hints:
http://members.aol.com/ajaynejr

Model for an urgent email:

"There is a problem with your account [any amount of detail included]. Please go to to our web site [www,citibank.com or whatever] and enter this code number: xxxxxx

(no blue links to click)
"

Then, in a prominent place on the official web site:

"If you were contacted by email about a problem with your account, log in (space for user name and password provided) and enter the code number from the email message here ___________ and click Go"