A referral from a past customer is always a positive sign of legitimacy, but it is certainly not fool-proof. The crook may have just met this past customer recently and sees it as an invitation to get in the door.