the easiest way to identify whether it is scam or not..check the email address..

how can the both email address provided isn't hosted by the bank name?

eg: if you work in maybank. the email address shall ends with @maybank.com for the entire organization, regardless whether it is an email add for the public.