You have an email invitation from someone you don’t know. There is an offer for low-cost or free tickets to that game or show. Your financial institution said they have a problem and they need to get your credentials to fix your account. It appears that your email site needs some information from you, but it just doesn’t look right. You receive an email that appears to be internal (it turns out it is not) asking for information.
