Yes, I've had two such things from "earthlink". If you look at the headers and message source, you'll see how the information is being redirected (and the nincompoops aren't even that clever about it if I can spot it). There was a major advisory (FBI?) a week or so ago saying that this was going on. (I got the first one 2-3 months back and called earthlink immediately to warn them.) The perpetrators are doing an excellent job of mimicing the supposed source... but graphics are a matter of cut&paste in html. Undoubtedly some gullible folks will assume that their card caused a snit in the system and gladly retype the information and passwords for these thieves. Carolly