you or your client using Google’s Gsuite as email service provider?
cause the same thing happened to one of client in Chennai, India.
but they client didnt tranfer the funds since he found that the bank account the fake guy sent was new to them. so the client called orginal company back and reported it.
may be the recorded audio is getting uploaded byte by byte, plus this is not the first time, i always keep my location truned off for Facebook, yet it showed me the realeaste ad near to my location where i was, and that was my client location. not even close to my home nor office.
i was once talking to a friend that i should get a new laptop bag for my mac, i never searched on anything. but after 2 days i’m abale to see the laptop bag ad from amazon on Facebook