Fake grant email promises 4.5 Million but could steal your identity