Lately I have been getting really smart and crafty scams. 1. No obvious reasons to believe it is a scam i.e. no typos or anything. Mail from a prepaid card tha

Lately I have been getting really smart and crafty scams. 1. No obvious reasons to believe it is a scam i.e. no typos or anything. Mail from a prepaid card that we didn’t use a certain card balance and them asking us to send information (includes SSN#) so we could claim the unused card balance. 2. My wife got a mail from the vendor of a certain HSA account saying that they had been breached and her information could be compromised and to signup for some experian service that had a little different domain name from experian.com. I almost fell for these two because 1. We did get gift cards from ppl few years ago and maybe I didn’t use them all 2. I’m aware of experian credit locking but if I were to do that I would Google experian and not point to that strange domain. Also why is vendor of HSA company contacting us, shouldn’t the HSA company inform us about this hypothetical breach?