It's very low risk. When you set up the etransfer and before you send it, you can see whether a person has auto-deposit turned on. If she does, you can decide not to go through with it. If you choose a unique password she wouldn't be able to guess, you could prevent her from depositing it until you've arrived and seen that she's the girl in the ad and seems legit.