Once you've checked their methods of communication are legit then check that the company is. Agent for registered entity compliance can go through government bodies to check credentials but this is frequently overkill. Just Google they name and if any red flags go away. Various people had lost their jobs