The bloke who collects scrap metal round here was telling me he'd had a letter purporting to be from HSBC bank plc. It said that someone had attempted to access his account on the phone, but failed to 'complete our security procedures'. So would he fill in the form giving his name, address, passwords, etc. The whole package was apparently very convincing, including a handsome HSBC brochure detailing the firm's services.
There is, however, one big give-away. He doesn't bank with HSBC.
About a week later my aunt rung. "I've had a letter from the bank..." She'd taken the letter into town and shown it to HSBC where she banks.
The clerk had looked at it, then consulted her computer, then said, "Yes, someone attempted to access your account at 5.21am on the 6th, but they failed to give the password."
My aunt has never used telephone banking; in fact she didn't know there was such a thing. However the clerk said that she was all set up for it. Aunty came away confused. I've suggested that she goes back to the branch and asks for the password details, to see if that reveals anything.
Bill