How will you know the person emailing you is actually the owner of that username?