Assuming that the email client used even shows the domain. If you can train your employee to do an obscure technical check you can for sure train them to verify

Assuming that the email client used even shows the domain. If you can train your employee to do an obscure technical check you can for sure train them to verify invoices. After all, if you don't then the legit supply chain provider can just generate fake invoices.