[rnotaro]

Your case is really similar to this attack (`How a fraudster got $12 million out of a Canadian university: They just asked for it`): https://news.ycombinator.com/item?id=18186433