Companies you do business with should never ask for your account information, credit card numbers or password in an email. If you have any questions about an email you receive that supposedly came from your financial institution or service provider, find their number on their website and call them.
To learn more, check out this OUCH! newsletter: http://securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201512_po.pdf
More cybersecurity education available here: https://prezi.com/zkrdursavbgu/