I had the email wating for me when I got home. The header reads:
Return-path: <1ee5d7f5alayfovcia3mwhgyaaaaaat5zzlldfcbmaiyaaaaa@alerts[dot]barclaycardus[dot]com>
Received: from dmx1.bfi0[dot]com (relay037.bfi0[dot]com [208.70.142.37])
(Inserting [dot] for the "." so it's not a clickable link)
It was sent by bfi0[dot]com, relayed, spoofing the barclaycardus email address.
I received a legit email from Barclay this morning, notifying me my statement is ready. That header is:
Return-path: <1f1849ddclayfovcia3lzz5aaaaaaavdnmnmdfby4euyaaaaa@alerts.barclaycardus[dot]com>
Received: from bigfootinteractive.com (arm1101.bigfootinteractive[dot]com [206.132.1.101])
Goggled Bigfoot Internactive and Wikipedia says its a legit opt-in emailing company with numerous large clients. It is owned by Epsilon data management.
So then I Googled bfi0[dot]com, and found this article from Forbes:Target's Latest Failure And How To Spot A Scam
Seems like Target used bfi0[dot]com to send out emails offering victims of the breach free credit monitoring, but Forbes blasts Target for using target.bfi0[dot]com as the email address as it made the email look very suspicious. But when they checked the ownership of bfi0[dot]com, it is also owned by Epsilon data management/ Bigfoot Interactive. They note that Epsilon the company "sends and tracks e-mails on behalf of companies so they can tell which customers clicked links and what they found interesting".
With Pizza1 saying clicking the link results in advertisements for Airmiles and different CC's, I think it's dodgy email marketing, but doesn't sound like a data breach at Barclay. I'd pass on clicking the link.
Will be on the lookout for it.
