Be wary of emails asking for confidential information—especially of a financial nature. Legitimate organizations will never request sensitive information via email.
Don’t get pressured into providing sensitive information. Phishers like to use scare tactics, and may threaten to disable an account or delay services until you update certain information. Be sure to contact the merchant directly to confirm the authenticity of their request.