How can be they sure about authenticity? How they're conducting diligence for verification of Identity and address? If they're asking for PAN Card, how are they authenticating it because they don't have access to NSDL database or cross-verification facility like banks.
How can they justify their claim that website and services are not being tool of larger plot?
Pan card data can be easily verified as they must have subscription to the NSDL data. It only costs 12K INR per year I think.