I get them quite a bit from paypal, HSBC and other companies - you can tell that they are spoofs cos they say "Dear Customer", or "Dear Sir/Madam". ANd the other obvious clue, like you say Tim, is that you don't bank with them!! THere are usually addresses that you can forward them to so that the bamk can track them, or something equally useless. SHould be on their website...
:)