Real credit card companies wouldn't need to ask for you pin and cc# for they already have that. If you really are concerned though, try calling your company by phone and don't reply to them through e-mail.
They are so pesky that I just wish that they would one day get caught and be locked up.