A seemingly well-known profile asks for personal information. I propose to verify through a channel already known, instead of using the contact indicated in the suspicious message.
In the example, a phone call makes it possible to find that the person has not written. Photos and name can be imitated.
The request for urgency does not eliminate control. If information has already been shared, it is necessary to intervene on the exposed data and ask for appropriate assistance, avoiding shame or accusations towards those who have been deceived.