There are various scams that seek to obtain passwords to bank accounts and the like by sending emails that appear to be genuinely from Barclays, ebay, Halifax, Paypal etc.

These typically warn the recipient that their password (and/or PIN) may have been compromised, and offer a plausible-looking URL leading to a WWW page that masquerades as the real thing.