Additional:Cheers all for replies. It seemingly is a well known scam.
The additional use of a genuine email employed is for the effect it has ... concern.
To really prove they had taken over your email, they would have provided copies of your earliest email or random ones from over the years.
If they’d have done that, then I’d be worried.