If you ever receive emails like this nowadays—especially from Gmail, which has had its security exploited (Phishers abused Google Sites and DKIM replay to send valid-signed emails, bypassing filters and stealing credentials)—it's worth staying cautious.

It's like getting a scam spam call or text; once you reply, they know it's activated and will likely spam you even more.