Never click on a link on ANY email (unless you triggered the email, such as a "forgot password" situation).

If there is ANY chance the email is legitimate, CALL the company based on a reliable telephone number (not the phone number in the email).