Yes, it's a scam.
Simply clicking the 'log in' button might possibly be enough on its own to download malware onto your computer (perhaps then allowing an attacker to see everything that you do, including providing your card details to websites).
More likely though it will take you to a 'security page' where you're asked to 'confirm' (i.e. give away) details of your bank account or credit card information.