If you received an email notification about a shared folder or shared link, make sure the email really came from Dropbox. If it's not genuine or you're not sure, don't click any links in the email.
Forward the suspicious email to firstname.lastname@example.org and we'll investigate.
Even if the notification came from Dropbox, don't view or download a file, or accept a shared folder invitation, unless you know the sender. If you don't know the sender, ignore the notification, delete the email, or decline the invitation.