This was a simulation — here’s what to look for:

· Verify sender domain details
· Hover links before clicking; avoid shortened/unknown domains
· Be cautious with urgency + payment disruption claims
· Use known-good portals (bookmark/typed URL)
· Report suspicious messages immediately