I don't get why you are worried about the direct deposit info. All you are giving him is the info. printed on any check of yours, which you give out to whomever you write a check to.

Sure, we all need to worry about phishing emails, but you are discussing an employer, and an employer needs access to your personal information in order to pay you.