How does one know what is real from a scam? Afraid to answer and put out sensitive info.