Regarding the "it's free money, claim it now" language... my employer also does regular phishing tests yet I wouldn't be surprised to get this as a legitimate e

Regarding the "it's free money, claim it now" language... my employer also does regular phishing tests yet I wouldn't be surprised to get this as a legitimate email. Benefits from company partners, wellness incentives, etc. all read something like this and you never really know who the company gave permission to contact you until the message comes. A few anecdotal email subjects, all to my work address, from a 15,000 head company on the S&P 500: 1. "Claim your check now! $1.50 is waiting for you" Apparently a legitimate email refunding me for one time the vending machine failed to read my card properly (but had my work ID scanned). 2. "You could be earning an additional $1000 per week– find out before it's too late" Something about our 401k but included a link to some survey that HR required we fill out. 3. "Reminder: Claim your wellness check now" I expected this to contain a link to the health survey we're supposed to complete which gives me a $5/week discount on the health insurance I get through the company. Turns out this was actually related to some other company wellness incentive which gave us gift cards for participating in various events (bike to work month, etc.). I could probably dig out more but I passed all of those along to the corporate email check to make sure and each was verified as legitimate. I'm sure plenty of other companies have made attempts to increase "social engagement" without realizing the consequences it has for security.