I had this happen to me with PayPal of all places. I thought at the time it was genuine. Looked just like PayPal. Anyway--I responded and ended up closing my account after answering one.
I now have the NEVER AGAIN plan for ANY bank credit card or financial institution. I simply call them---If I have an account there. With the Internet--who the hell knows where it's going.