What should I do if I receive a phishing email from Coinbase?

If I receive a suspected phishing email from Coinbase, what steps should I take to ensure my account security? Should I immediately forward the email to Coinbase's support team? Should I change my password and enable additional security measures like two-factor authentication? Is there a specific process I should follow to report such emails? And how can I prevent receiving such emails in the future? I'm concerned about the safety of my funds and personal information, so I'd appreciate any guidance you can provide.