Regulators warn that impersonation scams can cause serious reputational damage even when clients aren’t directly affected.