Swf defacto police force

Check sender, check which domain the links are on, check reply-to.

If all check out, probably legit. I have not received this message.

I haven't received this email so I'd be checking the URL etc pretty closely before providing any details (and maybe contacting them on the standard contact channels to confirm) but I had to provide similar when I signed up to every broker.

It's required by all financial institutions for AML / FATCA so unless this is your only financial account I'm not sure how you could not be aware this is a thing.

This is an investment discussion site and not the help desk by the way. Why didn't you just contact the company?