I received a letter from the IRS regarding identity theft. They asked to confirm my information over the phone when i called them. Is this legitimate?