I never give out any personal info in an email (or an unsolicited phone call), I don't care WHO they say they are.

Surely any organisation that issues contracts requires more proof of ID than an email address?? To open a bank account I practically had to give them a blood sample for analysis!