We had to provide passport details to Intasure when they renewed our earthquake insurance for us. They regularly use email contact with us, we have never had any problems with them. If you are worried about the authenticity of the email, give them a call and ask them to confirm their requirements.