Correct.  We just had to go through this with them.  It was simple though, just passport and driver's license, and yes, it was genuine - it wasn't an email it was a notification ON the actual account when we logged in.  No big drama with ours tho.