A letter addressed to Alfa Bank’s Internet Bank customers was spammed around on September 26, 2007. The letter used Alfa Bank’s branded logos and letterheads; it also contained some information about the bank’s license details. At the same time, the contents of the letter give one grounds for suspecting it could be part of a swindle aimed at getting hold of the customers’ personal data and accessing their accounts. The letter reads as follows:

Dear Alfa Client Online User,

Due to the fact that Alfa Bank possesses some data on the increasing rate of IT-crime targeted at stealing money from the accounts of customers of Russian banks, we strongly recommend that you protect your company’s money by getting the Electronic Key ASAP. The Key is available at https://ibank.alfabank.ru.

Let us take the liberty of reminding you that in case you fail to obtain the E-Key before September 30, 2007, your access to Alfa Bank Online will be suspended on October 1, 2007.

Please be aware of the fact that you can get the Key free of charge between September 25, 2007 and September 30, 2007. Alfa Bank is doing its best to protect the safety and convenience of its customers. Further details are available at https://ibank.alfabank.ru.

If one clicks on the provided link, one finds itself perusing a website whose design strongly resembles that of Alfa Bank. The user is asked to enter his or her personal data (that is, one’s login and password) that actually provide access to Internet Bank (the remote account management system). In the meantime, Alfa Bank’s actual website says that the login and password are what you need to be able to manage your account electronically.

As a matter of fact, these data could be intercepted by some intruders who might then try to use them to get control over a user’s account and his or her money.