For the accounting employee 

Changes of bank data are never announced via e-mail only! Otherwise, the same applies here: If in doubt, always contact your internal IT department and/or report suspicious e-mails to your IT security team. If you have a contact person at Evonik, you can also contact them. However, under no circumstances should you use contact data from the suspicious e-mail for this purpose, but rather an already known telephone number; only in an emergency should you make contact via a new e-mail to a known @evonik.com address.