The client or the business? Often this sort of thing is spoken over the phone and keyed in by a distracted staff member. Maybe the customer doesn't even know they're meant to be getting emails.

Like the credit card statements I am getting from an Indian bank with no contact apart from an international phone call to India which I will not be making. And I can tell you the default encryption passwords they use on their PDF attachments is not particularly secure.