How companies assess your financial risk based only on your email address