In particular, this kind of low-tech spoofing could have been mitigated if the email client had highlighted the fact that the sender’s “name” was nearly identical to the sending address, and therefore likely a phishing email.