Thats right, once they receive the email it will include a transaction code and a security code which they will use to finish the account change, they can then change all of the info that you added for them. And I agree, the email is the most important thing.