Do not respond to requests for passwords, authenticator codes or other sensitive account information.
Block the user if you want to limit further supported interaction.
Use the available reporting feature if you believe the message violates the rules or involves abuse.