Weird Email from 'My Bank' Asking for Password – Is This a Scam?

So this morning, I got an email that looked like it was from my bank saying there had been suspicious activity on my account and I needed to verify my password immediately. The email looked pretty legit at first glance — logo, official-sounding message, the whole nine yards.

But then I noticed a few things: the sender’s email address was kinda off (a weird domain I’d never seen before), and the link they wanted me to click on went to some random URL that definitely wasn’t my bank’s site. I didn’t click anything, naturally, but now I’m wondering if my email or bank account might already be compromised somehow.

I’ve changed my email password just in case and ran a malware scan, but I’m stuck wondering how these scammers got my email in the first place and what else I should look out for. Has anyone else gotten emails like this recently? What’s the best way to double-check that your bank info hasn’t been leaked or accessed without your knowledge?

Any advice or stories would be really helpful!