Welles, These identify-theft attempts have been going on for months. First they hit eBay then PayPal, now Citibank and even my ISP. Most of these companies now have a place on their site where you can report and forward the emails for their investigation.
I warned a few days ago about ReservationRewards who gets people's credit card numbers somehow, somewhere on the Net (they got mine from PrintPal thru a promo I never signed up for). I immediately cancelled that credit card, but if this happens often enough, people will be afraid to shop online and many legitimate companies will be hurt.
Newly