Answers (2)
It sounds like a social engineer. You just need to alert your boss to the issue and they will tell you what to do from there. It really depends on your companies verification process and if this person can verify the account then it would be up to the policy in place.