Imagine that you've received an email asking you to transfer money to a bank account. Some of the details look right, but how can you be sure the message is legitimate?