Academia is tough - now imagine trying to enter it as a Syrian refugee - but it can be done successfully and the board members will never ask you passwords or other sensitive data. Also you will never receive strange links from them. Please always check the email sender and be careful what URLS you visit.