<p>If a student contacts you by email claiming he is a Penn student, most likely he will be using his upenn.edu email address. Otherwise, if he doesn't do that and you want to check he is in fact a Penn student, just ask him to send you an email from his upenn.edu address.</p>