This phish is a very well designed one, and has the chance of fooling a lot of people.

The email uses a variety of techniques and tactics - it tries to scare the potential victim, cites some information that sounds convincingly, the sender of the message is spoofed and the link is masked. The Keybank logo adds to the convincing look, too.

The phish site is well designed, too, but it has some obvious clues of phishing.

First, the URL of the site. It is made to look legitimate, but this is so only on the first glance:

Also, the http in front of the URL does not indicate a secure session (it should be https).

On the second screen, after 'logging in', the phish demands your personal information. The URL remains the same here: