How to verify something independently
Do not rely on contact information supplied in a suspicious message. Find the organization’s official website, statement, bill, card, or other trusted source yourself.
Be especially cautious when someone demands gift cards, cryptocurrency, wire transfers, cash, passwords, one-time codes, remote access, or secrecy.
If you already disclosed sensitive information or sent money, contact the relevant financial institution or service through a trusted channel and follow its security or fraud procedures.