The scam involved mimicking details of the charity’s contacts and has led to the social housing regulator downgrading its governance rating.