My first port of call would be to triple check the sender's email address to make sure you're not being scammed.

Emails saying things to the tune of "account still posed to great of a risk" and "starting refunding my clients if I did not provide further review for my business" doesn't sound very Stripey.

List of official Stripe domains: https://support.stripe.com/questions/verified-stripe-domains....