One possible answer might be that Sam and Chelsea realize that the message does not contain the bank’s logo or
company branding, it was not sent by an individual employee of the bank, and that it asks for a social
security number, which seems unnecessary.