You are working as a technician at Fatskills .com. One of Fatskills 's users is unable to log in to the domain as she has forgotten her password. Fatskills .com has a security policy that says the last four digits of the employees identification number must be verified before performing a password reset. This rule exists in order to protect the company against social engineering attacks. The user is not able to provide that information over the telephone call. Which of the following would be the BEST way to handle this request?