Call the sender via a verified phone number from your personal contacts and have them confirm the message was sent by them.