I would assume its a scam otherwise.

Like how do I know you're not just sending them to lightning addresses you control?