Pretty easy to handle. If you get a call or email or regular mail from a business, don't contact them through the info provided. Look up a number yourself and call the number from an official site. If it's legit, they'll be able to help. If it's a scam they'll have no idea what you're talking...