Ask about account access or the application process. Do not send passwords, codes, payment details or identity documents.