First time founder - scam? I will not promote

Hey fellowpreneurs, I’m in the midst of my first startup and I’m not sure where to turn with this; any lnowledge or guidance would be tremendously appreciated!

I’ll try to make a long story short - some guy added himself to our company on LinkedIn as Volunteer staff, I reached out to LinkedIn and they just said flag it and shortly after he disappeared from LinkedIn altogether.

Fast forward a couple months and I get an unsolicited e-contract to my business email address (that isn’t listed anywhere publicly as far as I know or can remember). I didn’t click or open out of phishing concerns, but, having worked at an e-document company for a long time, think it was legit (as in, if I’d opened it it would have allowed me to sign an actual document, not just malware or whatever phisherman do…).

Finally he emailed directly with this today:

“Subject: Financial Institution Change Request

Hi [redacted],

I need to change my financial institution information before the current payroll is completed, I need your prompt assistance in this matter please.

What details would you need ?

Best Regards, [redacted] Volunteer Staff [my company]”

TL;Dr, this same guy threw himself on our team on LinkedIn…is also the person who's been sending digital contracts for payment and now this...I don't know what to do - the guy (or scammer) is clearly up to something, but again I don't know what to do about it.

Ideas? Thoughts? Any vulnerability here or is it just noise?

I will not promote Edit - missing word Edit 2 - punctuation