I get so many phishing emails; I have a conditioned reaction. Most of the time I delete them without opening them. If it’s one I’ve never seen, out of curiosity I look at the sender’s email address, usually so ridiculous, DELETE. Never open their files, never call their phone number. If you are concerned it may be legitimate, a bank or business looks up the number from a legitimate source. If you bank online check your accounts regularly. I like the auto pay ones that say we’re having a problem with your credit card, if it’s not corrected immediately, we will have to close your account. Right, I’ll just call you, give you my credit card number and security number, problem solved. Common sense and that gut feeling is all it takes; the paranoia will soon disappear.