Moral of the story - never open anything suspicious. Check the sender's address and if it looks sus then it probably is. 'HSBC' are spamming atm claiming I've done too many login attempts. 'Click here to reset your password' Considering I don't have an HSBC account.........