Get it in writing. E-mail, fax w/ signature, gpg signature, etc. Some kind of verifiable writing should be sufficient.