Print this and keep it by your telephone.
1. Was this unexpected? 2. Is it urgent? 3. Does it want gift cards, wire transfer, cryptocurrency or a payment app? 4. Does the web address really belong to who it claims? 5. Can I verify it by calling a number I looked up myself?
Two or more yes answers to 1-3 means stop and call someone you trust.