Are you sure it's legit?

If a scammer got into the other's email then they may have yours too, the email may have a malicious link.