One mail a day. Real, or phishing? Check the sender, point at the links, open the headers if you like, then decide.
You are Sanne de Vries, office manager at Bakkerij Klaassen in Veenwold: one shop, twelve staff, a lot of flour. Peter Klaassen owns it; Lotte runs the shop, Ahmed bakes. You do the ordering, the paying, the website and anything with a screen.
The bakery’s mail runs on Fyzno. It banks with Tulpbank, buys its flour from Meelmolen De Hoop, keeps files in Wolkdrive, does its books in Kasboek and its payroll through Bosman Administratie. The phones are a landline in the shop and everyone’s own mobile.
Parcelo <notice@parcelo-delivery.top>
29 Oct, 09:14
To: Sanne de Vries <sanne@bakkerijklaassen.nl>
Hello customer,
Your parcel NL-88412-PX could not be delivered because an import fee of €1.99 has not been paid.
Pay within 24 hours or the parcel is returned to the sender.
Parcelo Customer Service
Point at a link (or tap it) to see where it really goes.
Several of these mails only work because the real sender has no strict DMARC policy. The free mail check shows in twenty seconds whether yours does.
Got a real mail you are not sure about? The header reader shows where it came from, in your browser.
Every person, company and domain in these mails is made up, apart from Fyzno. The links and QR codes go nowhere. Your answers stay in this browser (clear them).