This sounds like it could be a phishing e-mail. Please report the e-mail immediately (with the email headers intact, if possible) to https://security.intuit.com/ . We will look into each reported instance.
See this FAQ for more on avoiding phishing e-mails and scams: https://ttlc.intuit.com/replies/4256209
No. Did you read the reply that was already in this thread? Do not click on suspicious emails.