The scam also shows how easily criminals can mimic the language of trusted companies.