Received a txt with message as follows.
HSBC A payment was attempted from a NEW DEVICE on 24/05 at 15:48. If this was NOT YOU, please visit:
https://www.hsbc.secure-revokpayee.com
A scam or what Tried phoning hsbc fraud but no luck. Kept on hold for ages.
Your link is dead anyway and secure-revokpayee.com never seems to have been registered as a domain name. So the scammers have either got ahead of themselves, and started sending out texts before they've registered the domain, or they've mis-typed something in the text.
Either way, they're not very good at what they're doing!
I don't believe any bank or legitimate organisation would include a link to click if they wanted to alert you. They would ask you to contact them separately as you rightly did OP.
malagabob has probably mistyped the URL, missing out the 'e' of 'revoke'. I think the intended link is:
www.hsbc.secure-revokepayee.com
which does go to a 'look alike' HSBC site.
The 'secure-revokepayee.com' domain name was only registered at 1326 today (unsurprisingly using an Icelandic privacy service, to hide the registrant's details).