aegon genuine request for id OR potential scam

Cobbler_tone

It's been covered but the way around any scam (with a large, legit operation) is to get their number and call them. Unless their lines are intercepted it is pretty foolproof! Or email them at their official address, dodgy addresses are normally straight forward to spot. On the rare occasion someone 'official' calls me, I always say I will hang up and call back.

With work emails I pretty much report every external one as phish these days, before accessing them. Especially as we have now started taking disciplinary action for clicking on phising exercise emails in error.

Unfortunately, you can't be too careful these days.