Can sending documents (as aadhaar, pan, bank statement, etc) to non business email addresses, which say on getting us loans, harm us? We are getting emails asking for documents of company (gst, pan, aadhaar, gst returns, bank statements, etc.); though sender is saying to be from certain loan giver, (as kotak, etc.) but email ids are not of the loan institutes (emails are ending as @gmail.com, instead of say @kotak.com). Could sending documents harm us?

We are getting mails as these for the second time; before, I directly sent mail to the official email address of the bank which sender was saying as to be contacting us from; bank said the email address as to be not of their bank.