Do not click on any links or download any attachments. Report the email to your IT department if you have one, or to your email provider. If the email appears to be from a legitimate organization, you could also contact them directly (via a known, trusted method, not using any information from the suspicious email) to verify the email's authenticity.