According to this link posted in another thread: https://www.thestar.com/content/dam/thestar/edmonton/2018/10/09/how-a-fraudster-got-12-million-out-of-a-canadi

According to this link posted in another thread: https://www.thestar.com/content/dam/thestar/edmonton/2018/10/09/how-a-fraudster-got-12-million-out-of-a-canadian-university-they-just-asked-for-it/_20181001141124982_1_.jpg https://www.thestar.com/content/dam/thestar/edmonton/2018/10... The email was sent containing the email address "accounts.receivable@clarkbuilders.us" and the name field "accounts.receivable@clarkbuilders.com"