Brian Krebs has an interesting blog this past week on Vishing "Cell phones: the new phish food". Becoming more common is the use of 1-800 numbers sent out in emails to lure the unsuspecting user into calling a bogus number and inputting sensitive identity information which the criminals use.
The best way to avoid this attack is:
1. Never click on any email links unless you are expecting it.
2. Google the 800 number and see if it is owned by the company in question.
3. Call up the company on a phone number listed on the company's website which you find from Google and ask them if the number is valid.