Make sure to check the domain from where the email or SMS is sent. Usually, phishing emails and SMS will have misspelt email IDs or SMS codes which are similar to that of official email IDs and codes. Do not share sensitive information of any kind by replying to these emails.