I was just asked to review. The mail came from a "no-reply@" address. The only way to decline was to create a 2-factor login, fill in a dozen required fields, and navigate through a user portal. If this was a predatory, no-name entity, I would ignore it, but this was a serious request