It seemed fishy to me too at first, but the email contains my communication code, and as far as we know, Wise hasn't had any recent data breaches.

I then called Wise support, and they confirmed it's a legitimate email. The support guy seemed a bit bamboozled by my question, but he looked it up and said it's a legitimate email from them.