My girlfriend was just a victim and she's very pissed off at herself for falling for it. I've told her about these types of tricks and she still fell for it unfortunately. She was sent an email requesting her identity to be verified and they asked for social security number and credit card numbers. See Below:

"
Elevations Credit Union is constantly working to ensure security by regularly screening the accounts in our system. We recently reviewed your account, and we need more information to help us provide you with secure service. Until we can collect this information, your access to sensitive bank account features will be limited. We would like to restore your access as soon as possible, and we apologize for the inconvenience.
Why is my account access limited?

Your account access has been limited for the following reason(s):
# Jul 13, 2006: We would like to ensure that your account was not accessed by an unauthorized third party. Because protecting the security of your account is our primary concern, we have limited access to sensitive Elevations Credit Union account features. We understand that this may be an inconvenience but please understand that this temporary limitation is for your protection.

(Your case ID for this reason is NSRA04-410-321-4364.)

protect you. At Elevations Credit Union , one of our most important responsibilities to you, our customer, is the safekeeping of the nonpublic personal ("confidential") information you have entrusted to us and using this information in a responsible manner. Appropriate use of the confidential information you provide us is also at the heart of our ability to provide you with exceptional personal service whenever you contact us.

Please confirm your identity here: https://bank.uofcfcu.com/UOFCFCU/Login.aspx

Completing all of the checklist items will automatically restore your account access.

Copyright ©2005 U of C Federal Credit Union/Member NCUA. All Rights Reserved. "


I did a couple scans on this host name and it turned up this IP address: 12.111.190.67. I checked DNS Stuff and did a City by ISP and it said that the IP looks like its from Canby, Oregon. I'm interested in reporting this person but also finding out more about them, what else can I do? I've already emailed the antiphishing group (I found the sticky in the main phishing forum thread).

Thanks for any tips, comments, etc!