Answer 2

A suspicious sender (not the official postal address) combined with an unusual request.

Phishing solution 2