Never login or provide any information to a website that you reach by clicking on a link sent to you by email, no matter how official or authentic it seems. If you get an email warning you about a security issue, pop open a new tab, manually type the company’s URL in yourself, and proceed from there. Treat all links sent to you by email—as well as files, for that matter—with the utmost suspicion, always.