This is a common phishing scam, using various bank names - BoA is a favorite.
I generally get them pretending to be my Phone/ISP company. Usually pretty obvious - bad English, the terminology is 'off', and my company has a stated policy of 'never asking for personal information by E-mail'.
Hard to believe people fall for this, but I guess they do it enough so these criminals keep trying.
