This is why it's always best to research these things. Google the email address first and foremost and see if it's been black-flagged at all. If they mention a company, again Google your heart out and check reviews, reports, etc.
You too can be a private detective.
and save your work from getting into the wrong hands.
If people have research questions, let us know.