Its a common tactic now, phishing its called. if in doubt goto the site by typing the address in and not via any links.