I advise anyone who clicks around on dodgy emails that thinks they could be being phished, to close their browser and re-navigate.
Also I advise people to make a custom homepage full of links! I do this, saves time and effort typing, ha.
Also, banks seem to have the power to retrieve payments when you pay them out, so do this, which it seems you are.
Make sure to tell them what is/you think is going on.