A person may not, with the intent to engage in conduct involving the fraudulent use or possession of identifying information, send or cause to be sent to an electronic mail address held by a resident of this state an electronic mail message that:
(1) is falsely represented as being sent by a legitimate online business;
(2) refers or links the recipient to a web page that is represented as being associated with the legitimate online business; and
(3) directly or indirectly induces, requests, or solicits the recipient to provide identifying information for a purpose that the recipient believes is legitimate.