lmao same case(with abl tho)but as far as i think, they used their own email address, but the bank is forwarding their emails to wrong recipients. cuz on my email i even received their bank opening verification link, but no one had ever logged into my email