Remittance Advice
Remittance account update
Sent from the genuine vendor mailbox after it was compromised, with SPF, DKIM and DMARC all passing. Only the behaviour changed.
PayeeBuildRight Contractors (fictional)
Instruction in the lureMove the deposit to a new settlement account
Clearing time in the lureTwo business days
Beneficiary detailsWithheld on this demo page
Link in the compromised vendor mailbox sample. Kept live; this sample is not part of the current refresh set.