This is a very cleverly constructed phishing email! It has the correct
From: address, and it's digitally signed somehow.
I spent some time looking through the headers, and the origin machine is
a random VM somewhere in the cloud. There's no sign that it ever went
through gmail.
They must have gotten a Gmail private key for signing the header using
"DKIM".
In any case, it's obviously fraud, and Lisa wasn't hacked or anything.
It's just an exceedingly clever counterfeit.
If anyone else gets this, just ignore it. There's nothing else to be done.
Mojo
-------- Forwarded Message --------
Subject: ACBL Unit 559: Outstanding Payment
Date: Mon, 23 Feb 2026 11:05:08 +0100
From: Lisa Walker <lisawalkerlac.gmail(a)mail.com>
To: mojo(a)whiteoaks.com
Hi Mojo,
I’m on vacation with poor spotty cell service and can’t make calls.
Could you please cover an urgent $5,500 for the ACBL Unit 559 via bank
transfer, zelle, or Venmo? I’ll send the payment details once you
confirm and i'll have you reimbursed as soon as I can.
Thanks for jumping on this!
This is urgent, Please get back as quickly as possible.
Kindest Regards.
*Lisa Walker*
President
ACBL Unit 559
lisawalkerlac(a)gmail.com <mailto:lisawalkerlac.gmail@mail.com>
Send from my iPhone