They just keep coming. Innovative phishing scams, appearing to come from a legitimate email address, sometimes from our own domain, asking for us to update our account or login to fix or confirm something right away...or your account will be terminated.
This is social engineering at its best. It's like the snake oil salesmen of old. Wiley miscreants who charm us to act...buy something or, in this era, give something up. Your username and password! This is how they steal your identity. Once they get a little about you, they can find ways to get more.
Never ever ever respond to emails that ask you to give up information about your accounts, usernames, passwords or other personal information. If a legitimate organization wants your attention, they would never ask in an email. If in doubt, ask. DON'T ACT.
There is a sucker born every minute. All these scams need is one in a million to make it worth their while. Don't let it be you.