Spear phishing uses real details about you, gathered from social media or breaches, to seem authentic. The presence of accurate personal information doesn't prove legitimacy — verify requests regardless of how much the sender seems to know.
“Knowing your details doesn't make them trustworthy.”