vaxvms
Asking to use Signal for sensitive communications should be a tipoff, like scammers asking for payment via gift cards. This points out the necessity of a layered security approach and process that includes social engineering among the rest. AI spoofing is one more vector to consider.
Also see https://securityawareness.dcsa.mil/cui/index.html