At least, that's one way.

The best way to make sure he is legit, is to ask him for references from providers who are themselves legit (I.e. they have websites and are reviewed, etc.)

There have been cases of people assuming other people's handles for nefarious purposes.

One provider told me that someone said he was mrfisher, acted stupid, and she believed him.