Not only that, I used to use [email protected] for setting up aliases to interact with different businesses. On more than a few occasions I had some very confusing back and forth until realising the issue, when they asked which department I was from.

When they saw their own business name in the email address they just straight up assume I am part of their company. No wonder phishing works.