Look into the zip file for information? If I had received that email I would immediately have known it to be fake.
Especially if it requires a password to open as many of these ZIP files do in order to prevent AV scanners from checking them out. They are usually kind enough to include the password for you.