Emails can be spoofed easily. You should confirm the email address by looking at the actual host first.