Always remember your cyber security best practises.
Don't click on sketchy links in emails (or even any links in email - go straight to
www.tesla.com in browser)
Make sure the domain is correct. Double check. Make sure there are no special characters that look similar to normal letters.
Make sure it's a HTTPS secure domain with the padlock to the left of the URL.
Then send a test payment and wait for it to reflect on the website the following day.
It's a lot of money we're talking about, and scammers are smart and know all of the tricks.