I get these all the time.  They are a very common email / internet scam.  The website that the scammers set up will be very sophisticated, often displaying the same icons and layout as the actual credit union and with a net address that appears legit.  NEVER respond.  NEVER click such links.

This is the internet age and you MUST act with great care and diligence before accepting friend requests, or answering emails, or allowing popups, or allowing automatic updates, or downloading files, or clicking on links, or allowing auto-run programs to modify your systems.

  Get antivirus and scan every download.  Go to Spychecker.com and browse tons of freeware that will help block popups, load your dangerous website filters so that you cant even go to certain dangerous pages, will scan your emails for malware and more. 

  Be safe and proactive in your own defense.  Check out the freeware on CNet's site too.