Always contact the organisation (provided you even have any dealings with it) directly via the number they post officially online or on legitimate documentation received from them (ex. back of a bank card or in a trusted letter wirh proper letterhead, etc) and never via any link or phone number...