Be careful of those as well, but in this case it's quite simple: password reset links should only be sent when the user explicitly requests them; of you receive

Be careful of those as well, but in this case it's quite simple: password reset links should only be sent when the user explicitly requests them; of you receive an unexpected email asking you to reset your password, don't click the link.