IDG News Service has an amusing article with a spam email that is targeting Citibank customers. Grant Gross takes a pot shot at the spammers, noting “While the Citibank phishing scheme appears to use some clever tricks to entice recipients into giving up their bank card numbers, spelling isn’t among the perpetrator’s strong suits.”

It’s a sham that Grant didn’t dig deeper. At the Spam conference, we learned of some extremely sophisticated — messages that differ from legitimate Citibank email messages by a single character. That character, of course, is in the domain-name of one of the click-through URLs.