Slow the approach down and test the trust signals.

I can independently verify who this person or company is. The phone number, email, or website matches a trusted official source. Names, job titles, and business details are consistent across sources.

I am not being rushed into payment, disclosure, or a fast decision. There are no threats, guilt tactics, or unusual urgency signals. I have had time to pause and cross-check the approach.

No one has asked for passwords, OTPs, device access, or PINs. Payment instructions, if any, match a verified business identity. The request makes practical sense and is not vague or inconsistent.

I know what the request is really for and who benefits from it. I can explain the situation clearly without relying on their version alone. If this turned out to be false, I would not regret waiting to verify first.