If you think you have been contacted as part of a phishing scam, do not provide details. Your deposit is either held by one of the three deposit schemes or your letting agent/landlord, and you do not need to do anything but wait until your tenancy has ended. You can then discuss the matter with your agent/landlord, or your scheme.