No legitimate bank or e-commerce company is going to send its customers e-mails requesting security information. Nor is a bank going to send out an e-mail warning that a user's account will be suspended if they do not immediately provide their Social Security Number.