Tanya has received an email, apparently from her bank, stating that some of her records were lost during server maintenance work and that they therefore need the user ID and password for her account. Tanya suspects that it is a phishing attempt. What should Tanya do next?