Contact the company, especially if you didn’t expect to get the message. Get contact details from their website. Find out if they sent it.
Don’t follow any links to avoid fake websites or a computer virus.
Report scam messages on the app or social media platform where they appear.