Even if friends say the identity is real, I’d verify through the project’s official website/social channels first and never transfer funds based solely on a DM or personal claim.