The text of the mail reads:

From: Barclays IBank support [mailto:service@ibank.barclays.co.uk]

Sent: 08 January 2004 13:05

To: XXXXXXXXXXXXXXXXXXXXXXXXXX

Subject: Important your Barclays IBank account information.

Dear Barclays IBank Customer!

As part of our continuing commitment to

protect your account and to reduce the instance

of fraud on our website, we are undertaking a

period review of our member accounts. You are

requested to visit our site by following the link

given below. This is required for us to continue

to offer you a safe and risk free environment to

send and receive money online, and maintain the

Barclays IBank Experience. In success you will be

redirected to the Barclays IBank home page. Thank you.

“We are aware that some customers are receiving a message from an email address posing as Barclays Bank,” Barclays told customers in a message on its IBank login at the URL being spoofed. “Barclays is in no way involved with this scam email and the website does not belong to us. … Barclays does not send any emails to customers requesting your security or any other confidential information.”

Netcraft has developed a service to help banks and other financial organizations identify sites which may be trying to construct frauds, identity theft and phishing attacks by pretending to be the bank, or are implying that the site has a relationship with the bank when in fact there is none.