How can I be certain the email I received to make a payment is legit?