This kind of email is called phish. And every now and then you will get
this type of email from ebay, paypal, citibank or bank of america. The
safest thing to do is not to use the link that attached in that email.



Otherwise you will be transferred to a page that looks exactly the same
as log in page of those company and as soon as you put your password
and pin in, you give up you pin and username to the email sender.