[blackjava]

I've received these before. As long as they don't ask you to log in some where from your email I would think it is legitamit. You did the righjt thing by going to your account.