You can change your account settings to require personal information to reset your password.
How do I know an email is from Twitter?
Links in this email will start with "https://" and contain "twitter.com." Your browser will also display a padlock icon to let you know a site is secure.