Likely phishing, but using email addresses, a rookie method of account verification.