A letter from the ICO is probably genuine, but our Data Protection as a Service would be able to advise you, as well as provide advice on many other data protection related tasks.
It is possible that an email from the ICO is a scam, but we would need to inspect it to be sure.