Is there any risk in sending someone financial statements to do my taxes if they have the last four digits of my social security number?