Did you confirm it was a scam? Primarily wondering if it's possible that the company itself contracted someone to do phishing test for new employees. I know there are plenty that do email version of this.
If someone did fall for it, the potential that your employees would spend real money that they wouldn’t get reimbursed for would definitely piss a lot of people off.