Your favorite takeout joint is actually a catfishing scam — and it's totally legal