There's no harm in e-mailing him.
But if he asks you for any personal information (Password, Account Name etc) it's safe to assume that he's not legit. And if he actually gives you a file to download, make sure to scan it before you actually execute it.
I'd check it myself, but I used VIP stuff, so yeah <_<