The best thing to do when you receive an email or you receive a call you believe is phishing for information is to:

• Be careful and do not provide your details.
• Locate a contact number for the institution that supposedly sent the email or placed the call (do not use a contact number provided by the sender of the email or the caller/caller ID).
• Directly call the institution to check whether this was a legitimate request.