Your e-mail to them is NOT secured in transit. A PDF containing it does nothing to protect your CC information in e-mail. Any of the hops it takes from your mail client to theirs are unsecured.It is legit - it's from the same address as the original emails and it's confirmed by others. Does just seem meh though. But I guess the reasoning is that these orders are being handled by hand, and apparently this is the first shipment of Xtreme cards into the US.