Detectives say Robert Weathersby emailed the firm pretending to be a known business associate and asked for a change in payment instructions related to an upcoming settlement.