if you know the company sending them look for a security@ email and see if you can notify them