Check that you’re talking to a genuine NCSC employee, and not a criminal.