I just heard about this scam on the news.
Never respond to stuff like that, even if it looks legitimate. Our banks and credit card companies would NEVER ask us for passwords, etc. as they already have that information.
When in doubt, never respond to the email, instead call your bank or credit card company directly.
The scammers have gotten really good.