Or check with Fidelity Investments if this guy is really a contractor for their vehicle Veritude. And ask for his hacking certificate and issuer name
Surely an ethical guy would comply with request.
as for LinkedIn profile, except this Veritude (which is nothing specific really):
- Quebec Technological Systems Pvt Ltd does not seem to exist in Quebec registrar
- DDS Incorporation, Canadian registrar
link turns over 5700 similar names so...you get the picture.
Basically, just avoid. Or tell him 'pay-per-result' as Pharaon already explained (deduct from recovery, no upfronts)