I got an email from Tesco Mobile (my former phone service provider), saying they owed me a small refund and attaching a PDF purporting to include a barcode I could use to get the money from a payment agent. I haven’t opened the PDF. Is there any possible way this could be legit?