PSA: Fake verification replies are starting again. Don't fall for them. Best thing you can do is report them as SPAM to your instance and forward to any optional instances with "Fake Mastodon Verification Scam" written in the notes/comments section for the report. Make sure everyone you interact with knows this is going on. Permanent solutions to combat this scam are being implemented to tackle it by the software developers.