It is easy to be tricked by phishing, as emails appear to be sent from trustworthy entities or individuals, yet they contain malicious attachments, links, or requests for various items.
At first, you have to avoid clicking on any link or button. Never provide confidential information without checking.