IT WAS A TEXT MESSAGE which read: A new Payee request was created from an unrecognised device. You can Authorise or Cancel this request via: https://.hsbc.payees-connect.com/login/.