As this is all being done over email, how do I know it's not an elaborate phishing scheme?