Arrived today. If one picks through the source, the message was relayed through a French .edu server:
 
Hello [...your name...],


You scheduled a payment of $22,278.07 for your account ending in Regular Business Checking-7877.

[...dangerous link...]


This is a secure message from Bank of America.

[...footer probably copied from legit BOA site...]

These are my new personal favorites.   I had to say good-bye to my kids yesterday.
The disclaimer at the end is the best part...he doesn't want to be associated with terrorist organizations.....It's just business.

My response.

"Good day to you to. Hexogen eh, nasty stuff.
Unfortunately your "recruited Person" stood out like a sore thumb in this mid western town and I sent the boys out in their pick up truck to get im.
He did put up a bit of a skuffle, but three big ole boys and a couple of baseball bats calmed him down.
We now have him here in our offices and have defused the threat.
I guess the shoe is on the other foot now, if you would like to see him again we need $150,000 in cash, none of your stupid electronic money coins are good around these parts.
Details to follow...."

Nicely done sir.  Nicely done.

The supposed "guy" is going to have problems if he thinks he'll be able to check at noon, then 12:25, then 12:50, then 1:15, then 1:40... the 25 minute increments alone will drive him nuts. Maybe he thinks there's fifty minutes to an hour -- that would show too much contact with psychiatrists, who also believe in fifty minute hours.

This alone tells me that nobody actually thought this through even this far.

Plus, I can't imagine that the "recruited Person" would have enough nerve to drop by and pick up or diffuse the bomb.

Maybe this is some sort of pyramid scheme. the "recruited Person" is under some sort of pressure to deliver bombs ... or enlist a few more victims. If enough down stream victims pay, then the pressure is relieved.