It’s also just a good policy in general. Anytime you receive a communication that’s prompting you to do something that you weren’t expecting to receive you should ignore any links, phone numbers, replies, etc. in that communication and instead reach out using a known good mechanism. Doing that one thing stops the overwhelming majority of scams in their tracks.