How can Square Cash rely on the authenticity of the email sender? (stackoverflow.com)