Amazing that in this era of phishing the PIPCU expect someone to take significant action against their own customers on the basis of an e-mail.

And I'm 99.9% positive it wouldn't have been PGP or S/MIME-signed for authenticity.

Kudos to Mr Jeftovic for insisting on proper instruments, such as a court order.