Think Before You Click. Check the sender's email address. All requests for information will be sent through the CERT portal.