Agree you should be very cautious about any links in the email. Never click through.

Instead, pick up the old fashioned telephone and call the UPS number you find on their website (NOT the one that may be in your email -- it could be bogus too.)

The crooks are getting really clever these days. FWIW, when one of my card issuers wants to replace a card for suspected fraud, they call me first. And I make them read what they show on the account for the last 8 or 10 transactions ... or I tell them I will hang up and call back the number on the back of my card or on their website and talk to someone there. If the call is legit, they will not have a problem with it.

Amex replaced one of mine for fraud about two months ago. CS rep told me I was smart to refuse to talk to him until he confirmed to me that he actually knew what my last 10 charges were, together with amounts.