Citibank India wants credit card, bank account numbers to stop marketing emails
This is a phishing attack waiting to happen!  I never worked at a bank but I'm assuming (maybe I shouldn't) that there are a few people working there that know a thing or two about security.  I doubt that any person who claims to be a "security 
expert" would have let this go by, but I always seemed to be proven wrong.  Take for example TDBank in Canada who has a 80's password policy:Passwords must:- be 5 to 8 characters in length- not contain spaces or special characters (e.g. #, &, @)Poor customers if TD ever gets their password database stolen.