“A legitimate charity, one that is a nonprofit, that you can give a donation that’s tax deductible, will normally display what’s called an EIN, an employment identification number, somewhere on their website,” said Eugene Spafford, a cybersecurity expert at Purdue University.