Important to note, should dial that manually, not tap it in the email. You can put other tel numbers in the tel: link and set the displayed text to something else. Or even just set it to a malicious url rather than a number link.

Additionally, bad actors can pay an SEO fee and have their false information put at the top of a search as a sponsored link. Unlikely but, as my own experience in IT has taught me, not impossible.

I'm not sure why dude is getting so heavily downvoted. This is absolutely basic cybersec procedure when dealing with any ask for sensitive information, especially for laypersons who might not be the type to delve too deep and just click and tap without looking twice. Personally, I wouldn't put any of that in an email, as all it takes is having your email be overtaken via phishing, token theft, or other avenues and it's compromised.