telling anyone in our division (Which only dotted line reports to the NA offices, we're mostly managed via europe). Then, they sent out an email to the customer base saying our HQ is moving with some sketchy word document telling them the new address and banking info for payments, plus a new lockbox address in a completely different state.

I submitted it to the anti spam team and learned it was actually real... after telling the customer that it seemed super fake/sketchy.

It's not like I work for a small company either, 45,000+ employees and a market leader in what we do.