NEVER give out personal information when someone contacts you. If someone calls, emails or faxes you and wants ANY of your personal information—do not give it to them.
Instead, if you think the request is valid, you contact them. Find the phone number yourself and call them. Or “Google” their website and contact them. Always call back and authenticate who contacted you and if the company indeed needs any additional information from you. This way you know the source is valid.
Remember– they are good at these scams and the emails look very real, even with the company logo. But do not give ANY personal information if someone contacts you– you should always initiate the contact.