When receiving a call requesting PHI and you do not recognize the caller you should?

all of the above: confirm detials such as DOB, address, and health plan number of the individual's record, take the individuals name, organization and call them back, and request a disclosure form filled out.