You must never trust no one that approach on that way.
You must always to request to sign a message from a staked address or PGP would be enough to understand if you're dealing with a scammer or not.
It is really full of people that are sending such crazy messages daily. Once they know that you're into crypto (like replying a relative group) you will receive tons of spam.