Explanation
In this case, the attackers impersonate a bank and ask the user to activate a new security service, because the old mobile security mechanism will be out of order.
This way the user is lured to click on the link in the e-mail and enter their banking information in the phishing form.