I think a better solution is to verify that it's not a deepfake or other phishing attempt by contacting the person through a different communication channel that you already know and asking them to confirm that the suspect communication was really from them.