I never received any phishing emails from fake trezor yet, but I learned my lesson with ledger.
Always use new email address or alias for each service, and always try to purchase something locally with cash and without writing any personal info, or use anonymous lockers for delivery.
I don't see any good reason to contact trezor support, unless there was a lost package, device stopped working or something similar.
This is one of the reasons why DIY devices like Krux and Seedsigner are getting more and more popularity, but you can get phishing attacks with anything.
I know a guy who recently received phishing viber message telling him that his ''package'' arrived and he needs to contact (fake) post office to pick it up.
