the end with this kind of thing, I say to myself that if a thing with the bank is serious enough and legit, eventually they'll write a letter and I'll call in on the bank's standard number. Erring on the side of "probably a scam" is surely the best policy.