Never ever ever never click on a link from correspondence sent to you, even if you know it's from the source it says it is. Log onto the site in question and then contact them, send them what was sent to you and ask them if it's from them. More than likely it is not but it's better to be safe than sorry. One red flag is that the link does not start with 'craigslist' like their real site does, it starts with 'accounts' and then 'craigslist' Oh, and after you find out it is a scam/phish, don't be tempted to contact them to let them know you know they're scumbags. 1st off they already know they're scumbags and clicking that link can get you into other types of trouble. Delete it, mark it as scam/spam and just forget it. It's not going to be the last one you get for sure.