Regarding fake emails from ROCA Industry

The emails are written in English, the exact wording can be found below following this text.

Insidiously, the scammer(s) used an email alias from our employee as the sender address (andrea.dirscherl@rocaindustry.de). Ms. Dirscherl's "correct" domain email address is @rocaindustry.com though, and admittedly this difference is difficult to tell.

In another email (scam email 2) the email comes from ROCA Industry AB <accs.r@rocaindustry.com> and the person "Laura E. Kirven" (who does not work for us and is unknown to us).

We do not know who is behind these emails with the subject "Open Invoices", but we can assure you that we have no intention of switching our accounts and that there are no outstanding invoices with the invoice number(s) given.

If we were to make such important changes, we would notify you through means other than a relatively simple email.

We thank you for your understanding!

Gesendet: Montag, 25. April 2022 15:14
An: (Empfänger)
Betreff: AW: Open Invoices

Hello (NAME),

Thank you for your response. Please be informed that as we are undergoing the annual reconciliation audit on our previous account, we can not receive any payments on that account at this time.

Kindly update our account details which you have in your payment system to our updated account details below:

Beneficiary: ROCA Industry AB
BANK: TSB BANK PLC
IBAN: GB63 TSBS 7719 1800 1337 13
SWIFT/BIC: TSBSGB2A
Bank Address: GRESHAM STREET, 20, FLOOR 5, LONDON, EC2V 7JE.

We hereby instruct that all outstanding payments for invoices from now on, should be made to our updated account details.

Meanwhile please note; We are Currently undergoing our annual reconciliation audit and also trying to balance our accounts. Therefore, We would appreciate it if you can help us make the payments for this Invoices