Got an email that looked like ADP asking to “verify direct deposit.” Didn’t click — forwarding screenshot.
Ticket #1019
Closed · Urgent · Opened Jul 9, 2026 11:18 AM
Phishing email reported — payroll lookalike
Clients: Riley Nest · riley.nest@mesabi-outfitters.example (primary); Jordan Hale · jordan.hale@mesabi-outfitters.example · Mesabi Outfitters
Device: MESABI-POS2
Ticket is non-billable (contract / included) for labor.
Support time
1.00 h contract / included (non-billable) — does not appear as unbilled.
| Date | Type | Hours | Notes |
|---|---|---|---|
| Jul 9, 2026 | Remote | 1.00 h | Contract — quarantine, header review, user coaching |
Conversation
Good catch. Message quarantined org-wide. Confirmed spoofed domain. No compromise indicators on POS2.
Closed. Reminder: IT North will never ask you to verify payroll via a surprise link.