Gmail

An Australian bank customer received an official email that looked like a phishing attempt: it came from a generic "statements" sender, had no branding or sign-off, was a wall of text with poor punctuation, and was sent from a different domain (xyz.bank) than the bank's website (xyzbank.com.au). The customer questioned why a legitimate bank would send messages so easy to mistake for fraud.