you or your client using Google’s Gsuite as email service provider?
cause the same thing happened to one of client in Chennai, India.
but they client didnt tranfer the funds since he found that the bank account the fake guy sent was new to them. so the client called orginal company back and reported it.