And scammers are increasingly using AI, so it’s becoming harder to spot tells like misspelling, grammatical goofs, etc. I work at an insurer and to train associates with pop quizzes, they’ve started using emails that look very similar to our internal communications, use our logos (naturally), and even reference internal events that scammers can guess (e.g. annual compliance training, performance review reminders). They call the program “The Phish Bowl.” 😏