Examples of ways to identify a phishing attempt.
ITS will NEVER ask for your username and password in an email - or in a link from an email. Never ever. SERIOUSLY!