Citibank India wants credit card, bank account numbers to stop marketing emails
This is a phishing attack waiting to happen!  I never worked at a bank but I'm assuming (maybe I shouldn't) that there are a few people working there that know a thing or two about security.  I doubt that any person who claims to be a "security 
expert" would have let this go by, but I always seemed to be proven wrong.  Take for example TDBank in Canada who has a 80's password policy:<p>Passwords must:<p>- be 5 to 8 characters in length<p>- not contain spaces or special characters (e.g. #, &, @)<p>Poor customers if TD ever gets their password database stolen.