Forum: money.stackexchange.com
Tags: <mastercard><credit-card><password><phishing>
Title: Received email from credit card company: "URGENT: Your Master Card SecureCode Password has expired!" Is it legitimate?
Question: (Public service announcement)  I received an email titled " URGENT: Your Master Card SecureCode Password has expired! "  The email body is an image.  Is it legitimate?

Answers:
sents: text: It's a fake!
text: Don't fall for it
text: or you'll regret it!
text: This is another classic example of what is called a phishing attack .
text: This other question has another example .
text: The email in question was not from MasterCard, your bank, or your credit card company.
text: A phishing attack is a form of social engineering or pretexting where you are led to believe through an official-looking email that the notice is from a legitimate source when, in fact, it is not.
text: Cyber-criminals and online organized crime try to use phishing attacks to trick you into revealing your credit card number, your bank account information, your Social Security Number (SSN, United States) or Social Insurance Number (SIN, Canada) or any other kind of personal information.
text: Your bank, credit card company, or other financial account provider
text: should never ask you in an email to visit their site through a link provided in the email.
text: Never trust a hyperlink provided in an email — odds are good
text: it leads to a fake site created by criminals!
text: When in doubt about such a message, don't click anything .
text: Contact your financial service provider by phone to inquire, using the phone number on your card or on a previous bill.
text: Don't call any phone numbers in the message.
answer_details: author: money.stackexchange.com/users/3/Chris W. Rea
score: 12
sents: text: Most, if not all, banks, have an address that you should forward such messages to.
text: Again, do not click on anything in the email itself , but go to your bank's website by opening a browser and typing in the address, then look for a link saying something about "fraud" or "phishing" attacks.
text: It will probably have an email address, and then you should forward the phish email to that address.
answer_details: author: money.stackexchange.com/users/337/MatrixFrog
score: 7
sents: text: In my experience - security issues are typically handled by banks via regular mail or a telephone call.
text: Email is used for notifications like a new statement is available, or we did that transfer you asked us to.
text: Don't reply to the email or click the links on a security question.
text: CALL
text: YOUR BANK instead.
text: That is why the support phone number is on the back of the card.
answer_details: author: money.stackexchange.com/users/172/harmanjd
score: 6
sents: text: Do not trust the hyperlink.
text: If you feel there is even the slightest possibility that this is real, call the number on the back of your actual credit card.
text: Don't click or call anything provided in the email.
answer_details: author: money.stackexchange.com/users/None/
score: 5
sents: text: I have similar experience, in cases like this banks are normally send you a normal mail and ask you to call them back.
text: They never send you an email and ask you to do anything regarding to your password.
answer_details: author: money.stackexchange.com/users/137/gyurisc
score: 4

Summary of the answers:
This is definitely a fake.
This e-mail is a fake.