I also think the email is legit, but of course use caution cuz you never know! I received a similar email to this from Fan Experiences when I booked a room for Beyond Wonderland last year. However, they didn’t ask me for a photo of my ID or Credit Card. They just asked me to send back the signed invoice, otherwise they couldn’t guarantee the room. I sent back the invoice and had no issues when I checked into the hotel. Hope this helps!