In general, regardless of the context, never never never click on a link in an email purporting to be from one of your service providers, banks,
ebay, credit cards, stores, etc. If you've opened the email or link, always reboot as Chesham recommends, go to the main website, make sure it is the legitimate secure site (or call the customer service number, e.g. on the back of your credit card), log in and check messages or alerts. Same goes for phone calls - if the caller is representing to be from one of your service providers or any government agency - Social Security, Medicare, IRS - never give out any info at all. Call them back on a legitimate number or go to their website. Legitimate ones would not call asking for personal info. I got caught once (35 years ago, no less) when a caller purporting to be from one of my credit cards just asked to verify that my wife was also on the card. That's apparently all they needed to commit fraud.