Websense has identified a spam postcard campaign that is using Christmas as a tactic.