Big Phish Casts Wide Net for VISA Customers

Here's the phish that is finding its way into customers inboxes:

SUBJECT LINE: Protect your Visa card online with a personal password (that's a good one!)

Verified by Visa protects your existing Visa card with a password you create, giving you assurance that only you can use your Visa card online.

Simply activate your card and create your personal password. You'll get the added confidence that your Visa card is safe when you shop at participating online stores.

How it works–activating your card : You may activate Verified by Visa for your Visa card in two ways: Activate now or activate during shopping.

Activate your card now

You may activate now by entering your card number over our secure server. If your card issuer is participating in Verified by Visa (most issuers are) you'll complete a brief activation process. You'll verify your identity, create your Verified by Visa password and you're done.

To activate now your visa card please click on https://usa.visa.com/personal/security/vbv/index.html (LINK REMOVED -- underlying link goes to a different address. The link in this post goes to the actual VISA site but the link contained in the phish email goes to a BOGUS site which is what makes this so dangerous. )

Participating Card Issuers With more than 8,400 card issuers now offering Verified by Visa to their cardholders, it's easier than ever to activate your Visa card.

To find out whether your card issuer is participating, click (link removed) Activate Now, enter your card number, and submit the information over our (link removed) secure server.

How do I know activation is secure and safe?

Personal and payment card information is transmitted using a high level of encryption (SSL), and is stored on a secure server behind a firewall to protect against unauthorized access. To learn more about online security, view our (link removed) Email, Phishing & Security Tips.

What are the Verified by Visa password requirements (number of characters, numbers, upper case, etc.)?

Password requirements are determined by each Visa card issuer/member bank. Contact your Visa card issuer to learn more about their password requirements. Can I activate more than one card?

Yes, you may activate all of your Visa cards, as long they were issued by participating financial institutions and Verified by Visa is available.

I received notice from my Visa card issuer that my card has been activated in Verified by Visa. What does this mean?

Some Visa card issuers provide additional security by initiating activation for cardholders. Just follow the instructions provided by your card issuer and start shopping with added safety and confidence.

© Copyright 2005, Visa U.S.A. All Rights Reserved.

========The Actual email contains the VISA logo and Verified by VISA logo so it looks very official====