The OP has but a two-month history here on FT.
Potential security concerns are that if he is not telling the truth, then from your PNR he has your name, BA Exec card number, email, phone number, and one on-line password that you use.
No matter how high I place the likelihood of this being entirely legit, I would not use it.