One of our clients received the email shown. It was extremely convincing. In this case, the sender correctly listed last three digits of one of his accounts. Fortunately, he was on alert and disregarded the phone number in the email. He looked up the bank's number online and called them directly.