Phishing can be so easy to fall for. The folks who do this are coying almost complete websites to try to fool folks into giving up valuable information. Be diligent about not ever giving out a password, account number, any personal information. IF a company has somehow lost that info, trust me, they aren't gong to email you for it!