This is a very cleverly constructed phishing email! It has the correct From: address, and it's digitally signed somehow.

I spent some time looking through the headers, and the origin machine is a random VM somewhere in the cloud. There's no sign that it ever went through gmail.

They must have gotten a Gmail private key for signing the header using "DKIM".

In any case, it's obviously fraud, and Lisa wasn't hacked or anything. It's just an exceedingly clever counterfeit.

If anyone else gets this, just ignore it. There's nothing else to be done.

Mojo

-------- Forwarded Message --------

Subject:	ACBL Unit 559: Outstanding Payment
Date:	Mon, 23 Feb 2026 11:05:08 +0100
From:	Lisa Walker <lisawalkerlac.gmail@mail.com>
To:	mojo@whiteoaks.com

Hi Mojo,

I’m on vacation with poor spotty cell service and can’t make calls. Could you please cover an urgent $5,500 for the ACBL Unit 559 via bank transfer, zelle, or Venmo? I’ll send the payment details once you confirm and i'll have you reimbursed as soon as I can.

Thanks for jumping on this!

This is urgent, Please get back as quickly as possible.

Kindest Regards.

Lisa Walker

President

ACBL Unit 559

lisawalkerlac@gmail.com

Send from my iPhone