Keep repeating after me . . . NEVER NEVER NEVER give personal information online until you are sure that the request is legitimate -- and then think again.