Phishing

Occasionally, I receive what I believe to be a phishing email that is trying to steal personal information. One way I try to determine if it is legit is to click on the "From" address to see the actual email address. In this case, you can see it is "work@secure.net" which does not have the word Capital in it. If you enter the URL "secure.net", it comes back "This site can’t be reached". 

This may not be fool proof, but it does suggest you may not want to click on anything and should delete the email. If you want to be absolutely sure it's fake, call the company directly.