Never login or provide any information to a website that you reach by clicking on a link sent to you by email, no matter how official or authentic it seems. If you get an email warning you about a security issue, pop open a new tab, manually type the company’s URL in yourself, and proceed from there.