how do i know if it is legitimate? can just every one send one or is it already binding?