You done good, Opie. It's very easy to make an email look like it comes from somewhere other than where it is actually coming from. You don't even have to be particularly computer-savvy to do it. ALWAYS check any attempt to verify your identity.