SMS at 11:35 pm supposedly from CBA that I had authorised a payment to a new payee DAVID followed by a number. Unexpected? and gave a link to go to to cancel it.

Not my activity. I have reported this as a potential hoax to CBA by email.