It started with a Monday morning email. “Your payroll update is ready.” Harmless enough. I was one click away from a fake login page. And if I had gone furth…