The useful starting point
A message asking for access, a file or a changed payment instruction deserves context. Replying only to the same unexpected message may leave the identity question unresolved. A known contact route can provide a separate way to check the request.
A small step to try
Find the established contact information from your own records or the organisation’s verified source. Ask about the specific request without forwarding unnecessary sensitive material. Keep the confirmation and decision in the appropriate record. This communication habit supports checking; it does not independently authenticate every sender or replace specialist handling of a possible security incident.