I received this email appearing to come from an employee at my landlord’s office today (6/24). My landlord’s office is not open on Saturdays. I was immediately suspicious of it.

The email had about 30 recipients on it including me. The list of recipients did not include my fiancé, who is on the lease with me.

A email header analysis via google’s admin tools showed that the email did come from the email in the sender info. There is a mailto: link in the body that, when moused over, shows mailto:[email address of the employee].

I looked on the landlord’s website and this person’s name is listed as an employee and the photo on the website matches the photo in the email signature. The email matches the email listed on the website.

The language in the email seems off to me. All the other emails I have received from other employees at the landlord’s office have been very straightforward, this email is very flowery and apologetic in its request.

Overall, it has signs of being a scammy email and signs of being genuine, but I am leading towards scam. I sent a screenshot of the email to a different employee at the landlord’s office asking if it was legitimate. They are closed on weekends so I probably won’t see a response until Monday.

I think the employee’s account credentials were phished and the account is being used by a scammer under her name. Am I right to be suspicious of this email?