How to spot a phishing site, or more scammers

I’ve just received an email from yet another bunch of scam­mers posing as PrivatBank and its online bank­ing, Privat24.

Your pro­file is coming to its end.

For to remain active, please click on the link below and follow the con­di­tions of action:

http://www.privat24-ua.com/login

Thank you to You, Privat24

Why did it catch my eye?

1. The odd text of the email itself, in Ukrainian, with the word “Спасибі” (a Russianism for “thank you”).
2. The “From” field: Privat24 security@privat24.ua via agro.naverex.kiev.ua (why would PrivatBank send emails through some third-party site?).
3. The real address is https://privat24.ua/, and the con­nec­tion goes over a secure chan­nel (the address starts with https, not http).
4. At the bottom of their fake page there’s a sup­posed link to www.privatbank.ua that leads to the very page we’re already on.

Friends, be care­ful! And I’d advise PrivatBank’s secu­rity ser­vice to deal with things like this instead of inves­ti­gat­ing why I sud­denly wanted to change the phone number on my account (and demand­ing a writ­ten application!!!).