That email asking for proof of vaccination might be a phishing scam