> he confirmed that no one by the name of "Daniel Coffman" or "Daniel Coffmane" works at Wells Fargo.

This part sounds weird to me; surely helpdesk employees don't have access to full employee records?

Further, if the scammer already had this much information, couldn't they have used a name of any helpdesk employee who actually does work there?