Doesn't have to be hugely phishy if you have a saved contact card with a number you trust. That's often safer than some new app or web url that is imitating another.