Back when the "I'm calling from your bank and need your credentials" scam was new I would tell those people that I would hang up and call the bank back at the number posted on their web site.

You could do the same when contacting a well known prodomme.

Do a web search to see how many web sites and social media profiles they have. Figure out which aren't authentic.