Wife has had this message today:
Your debit details have failed, please update at 3three-support.co.uk
today to prevent service disconnection. The website is very authentic looking and has a valid SSL certificate.
We don't have an account with Three anymore.
I've done a Nominet search and the domain was only registered today: whois-search.com/who….uk