Phony emails will try to trick you into giving up account information or passwords, or clicking on a phishing link where you fill out information that identity thieves can collect and use. Usually what they're asking for doesn't make sense if you think about it, because they should already have that information!