This isn’t even an EDR specific issue — if someone makes an extraordinary request you should verify it, and if you don’t you are probably falling for scams constantly.