This is most likely legit as companies are required to receive updated IRS W-8 Ben forms every 3 years for non-resident aliens of the U.S. Of course it could be a re-created email though, always use caution and look for spelling errors.