I had this happen worse from my car loan bank. I got an email with a header that was obviously badly scanned from a paper document. It demanded that I provide

I had this happen worse from my car loan bank. I got an email with a header that was obviously badly scanned from a paper document. It demanded that I provide proof of insurance or my car loan would be canceled. It had the name of the bank and my name and my email, but nothing else of import. The only URL was to a domain unrelated to the bank. I ignored the first couple, and finally looked into it the third time. It was legit. When I told them all the ways this looked like phishing, they couldn't understand my concerns. I gave them the info they wanted in person at a local branch. I soon after paid off that loan and got away from them.