Please don't make the mistake my wife just did. As of this moment she's locked out of her online banking due to verifying a transaction through an email.
If you receive an email from Wells Fargo. Then the same exact email will be in your Wells Fargo Messages Tab inside your account online. So when you get that email that says you need to do something, Close it. Open your browser as you normally would and goto your banking like you would on any other day that you DIDN'T get that email. Then once securely inside your account THEN look at your messages. If that email doesn't show up then it's safe to say the email that came to you was a fake.
At this time the only thing we know is they changed the email account and delivery preferences in her account since that gets sent to both your new and old email addresses when you do that. Luckily Wells Fargo caught the action and closed the online account service. So now we get to lock her stuff down. We also have to lock down her credit since the info that we know they had access to was stuff like:
Full Name
Address
Social Number
Phone Numbers
Email Address
Basically anything you would need to steal an identity.
So For the sake of yourself. Watch what you click. Make sure you have a status bar being shown on the bottom of your email screen and your web screen so you can see the link to where you are going to go if you click.
Believe me when I say Chase Bank doesn't use rebecca???.ca as their web address.
Stu