@TechWhiz, you nailed it with the advice to change the password directly through the official channels. Even if the bank says no breach happened, it’s better to be safe and update your credentials. I’d also add that enabling two-factor authentication on your account can really help block scammers, even if they somehow get your password. And about the virus scan - it’s definitely a good move, but I wouldn’t rely on it alone. Sometimes malware can hide or slip past quick scans, so running a full scan with a trusted antivirus and keeping your system updated is key. Plus, keep an eye on your account activity for a while after receiving such emails, just in case.