This is a screenshot of a web page describing a phishing email very similar to the one in Figure 10. It points out that the email sends recipients to a spoof website that looks nothing like the real bank site, and that HSBC Bank never send their users emails requesting personal details in this way.