Yeah, I get those phishing scams too; but this one didn't come to my spam folder and it didn't have any links in it. That part seemed legit. The questionable thing was that to confirm my identity they wanted my card number, and that's what seemed suspicious. Anyway, I got a number from a separate computer and called.