It goes without saying. If you receive a dubious email like that you should never do what it tells you to do.