The scammer impersonate as our staff and sent an email with our company email signatures and letterhead to my client's email informing them of a change in bank account details. The scammer has actually setup a bank account in UK and ask our clients to transfer the payment of the invoices to that account. In his email to our clients which he used a Yahoo account and disguised it as our company emails, it contains the company PO number, invoices, client details, the services which he purchased from us together with the amount owned. We have no idea too how he has gotten hold of it as the disguise was done perfectly. Thankfully, the clients was more careful and alerted us which resulted in the scammer not achieving his intention to scam money from us.
Source: Scam Alert Singapore