>what if?

Here's one way to take the risk, if you want to let someone who emails you out of the blue like that contact you. (Personally, I don't doubt that person here was a spammer, I see the same thing happen all the time online; you can also Google the email/contact info given to see what turns up.)

But -- to contact someone without revealing your email -- this can be useful generally:

You can protect yourself by getting a unique forwarding email address at
http://www.sneakemail.com/

Give that only to one person/company/website. They send their email to it, it goes via Sneakemail who routes it to you without disclosing your real info.

If you don't like what you get, go back to Sneakemail and delete that address and anything sent to it thereafter is discarded.

Read the info at Sneakemail, they explain it well. I used the basic free service for years. Now I happily pay for the extra features of their advanced account.