I'll add - always double check If the email you received is from Alby. The only way to reliable do this is to check the address it was sent from, as the email design can look identical.

Be especially weary if the email prompts you to click some link or login somewhere