So it verifies who I am?
Yes, it verifies who you are to protect your sensitive information.
How can I tell if an email is really from you?
If the web address says .gov/  and the / should always be there.