Email Wendy at the SEC immediately through their website and ask if she actually did contact you? They too will want to know of fraud.