When in doubt, the best action is not to accept the request.

From there, follow the on-screen instructions to fill out and submit a report of the account.

The affected account will not know who filed the report.