I've just received an email from the genuine TescoBank credit card email address, but addressed to 'recipient', with very poor grammar, asking me to click a link that purported to be the Tesco bank website but was actually Some random site in Ukraine.
So clearly I am not unreasonable. What can I do? I've emailed their phishing team but if that account is compromised too then that won't help. It is a VERY good scam.