One mail a day. Real, or phishing? Check the sender, point at the links, open the headers if you like, then decide.
You are Sanne de Vries, office manager at Bakkerij Klaassen in Veenwold: one shop, twelve staff, a lot of flour. Peter Klaassen owns it; Lotte runs the shop, Ahmed bakes. You do the ordering, the paying, the website and anything with a screen.
The bakery’s mail runs on Fyzno. It banks with Tulpbank, buys its flour from Meelmolen De Hoop, keeps files in Wolkdrive, does its books in Kasboek and its payroll through Bosman Administratie. The phones are a landline in the shop and everyone’s own mobile.
Peter Klaassen <peter.klaassen.bakkerij@gmail.com>
Today 07:12
To: Sanne de Vries <sanne@bakkerijklaassen.nl>
Sanne, are you at your desk? I'm in a meeting with the bank and can't call.
I need you to buy 5 Kraampje gift cards of €100 each for a client gift. It's a surprise so keep it between us for now.
Scratch the codes and send me photos here. I'll sort out the payment later today.
Peter Sent from my phone
Point at a link (or tap it) to see where it really goes.
Several of these mails only work because the real sender has no strict DMARC policy. The free mail check shows in twenty seconds whether yours does.
Got a real mail you are not sure about? The header reader shows where it came from, in your browser.
Every person, company and domain in these mails is made up, apart from Fyzno. The links and QR codes go nowhere. Your answers stay in this browser (clear them).