I think it is quite likely that **_that_** is the scam. Be careful. They probably want you to contact them and give personal details, which can be used to impersonate you.