What to do is to contact the company, ONLY when you can google the address or take it from a phone book.
NEVER EVER click on what they send you. I just got an email sternly informing me that my bank account had been hacked, and they were waiting for me to confirm +++my account number and password so they could delete the charges against it. +++++++
I went online and found the bank's fraud address and forwarded it to them. Rec an automated answer saying thanks, they will take care of it.