This is an option you might consider before opening any email you didn't expect to receive. I also like the idea of an empty address book and the incorrect email address that Quiltinghere mentioned.
I received a scam email. My browser sorted it into my spam box. I didn't open it. I went to the search field (not url line, the browser search field) and typed in the title on the email. I got lots of hits on the search response page. It is a known scam email. I deleted it without opening it.
Sorry for anyone who gets hit by the bad guys.