It just feels like a massive risk to my business that they could take my business and essentially shut it down, and block any communications.

Surely they should be able to see that OP is an actual customer and not some sort of scammer.