This raised hackles and prompted myriad social media posts in which recipients asked if the email was phishing or the real deal. “Is this legit? Should I click it? Why is it asking for my phone ...