Don't engage with the message. Report it to your email provider and the relevant authorities. If it's from a legitimate organization, contact them through official channels to verify the communication.