The bottomline rule is this: Never ever trust anyone asking you to #verify or reset your keys and/or passwords. Ask first if you really need to confirm.
Yes, even if it is coming from what appears to be a legitimate email domain name because it can be spoofed!
Absolutely no one will ever ask you to verify your account in the #Fediverse network. It is not part of the experience. Sure, there were third-party services who did this a few years back during the Twitter Migration 2.0 but those were primarily targeted to well-established accounts from Twitter (and usually journalists), not to random people. Not you. Not me. And was definitely not in a spammy way.
Always remember, if you are not sure, just ask. There is nothing wrong with asking. If people laughed at you or ridiculed you for asking about a "simple" or "common sense" thing, block them (maybe one day you'll have the last laugh too).
You know what "askx means?
A-sk, and it shall be given = intelligence
S-eek, and you shall find = knowledge
K-nock, and it shall be opened = wisdom
Remember, A.S.K.
