You are sure, that they have anything to do with EASA?
Sounds more like some strange people using EASA to generate consulting business that might well be utterly useless to the customer.
Check the domain they are sending from and the "reply to" domain, as well as the unsubscribe link. Might be something fishy there.