Reply #4: Legit vendors will never ask you for sensitive information in an email. [View All]

[pagerbear]

When in any doubt, always go to the web site by entering the site in your browser's address bar, not by clicking a link in the email and check for yourself whatever the claim is in the email--credit card or password info about to expire, etc.

All the web sites should also have a place where you can go for security issues, as well as an address to forward emails like this to check out if they're phishing.