@yura ask for an identity check, like email address confirmation, TOTP secret, comparing the IPs that logged into that given account, ask if any of their friends/fedi mutuals can confirm this, ask if they have proof like a keyoxide/PGP/SSH key or a website which links to that account to crosscheck