all you need to do is check the email add.
If its a big organization, it should have its own domain.
Not like, transferconfirrmation.com (with 2 'rr's)
or accountant.com

Its rubbish, dont be gullible and remember, nothing good comes out of sending things to Nigeria.