HSBC: New payee MR C JONES was added to your account from mobile banking, If this was NOT you, visit: https://security.hsbc.unauthorise-new-payee.com_XXX
(I have added _XXX to the url to disable it from accidental clicking)
I hadn't seen one that looked quite as good as that - the clue re spam is that the url doesn't contain "hsbc.com" or "hsbc.co.uk", but had I been in a bit of a hurry or distracted I might well have clicked on the link...
Maybe worth reminding friends and family that the scammers are still out there.
VRD