14/10/2026
“But I was expecting that email.”
That’s exactly what made it convincing.
One of our clients had an email caught by their security filter.
They saw it had been blocked and asked for it to be released because it looked like something they were waiting for.
We checked it first.
It wasn’t the email they thought it was.
That’s what makes phishing tricky. It’s not always bad spelling, a strange sender or an obviously suspicious request.
Sometimes it simply arrives at the right moment.
If your security system has stopped something, “I was expecting it” isn’t enough reason to trust it.
Get it checked first.
Send this to the person in your team who handles invoices, payments or incoming documents.