Slow down when the email is flattering and vague
Red flags: a free email that almost matches a brand, urgency, a document that asks you to "verify" with a code, a link to a login page, or a request to buy the product on a strange site and get reimbursed. They also love "we will send the contract after you share the code."
Go to the brand’s real site yourself and find a contact. Do not use the link in the email. Turn on two-factor everywhere. If you already clicked, change passwords from a device you trust and check for new login sessions.