When I get an unexpected or dodgy email re an outstanding debt or financial 'issue', the first thing I do is hit 'Reply' and very carefully look at the senders email address, you can typically see it is off, websites can be very carefully copied.
I also limit the # of cards I have (2) and use...