. . . . "Call: If the email or website purports to be from a legitimate company or financial institution, call or email that company directly and ask whether the email or website is really from that company." .