WebWereld reports that Halifax has been the subject of an e-mail scan. The scam demonstrates that user-id, password combinations may be insufficient to secure access to bank sites. And that consumers may still need to be educated to be careful and not to provide their bank details to strangers.