Zero trust always wins, you can't verify that they are who they say they are, so call them after the notification instead of interacting with an inbound call.

Your name:*Required

Your email address:*Required

Pick a user name:*Required