What would you do in this situation?
Banking is hard because they usually want at least last 4 of SSN and sometimes other identifying information. I've tried calling the fraud department and reporting a fake account creation but so far without success.
If I get an email that has a notice saying what to do if the email is misrouted (common with legal documents), I do a reply-all saying that it was sent to the wrong email address.