NPR had an article this week, talking with a person who used phishing to build a false relationship and extract information from high ranking targets.
In the article James Linton explains how he used fake email accounts to seem to be inside organizations and obtain sensitive information. He did this for "fun". He set up accounts with names of real people inside the organization and pretended to be these people.
This article is an inside view of how easy it is to fake a communication and what awareness we need.
a Quote from the article: Linton says, "Just be a little bit more aware of how in the zone you get when you're in email. Don't always take it for [granted] that the name you see there is the name that's the person you're speaking to."
The article is on the NPR website: https://www.npr.org/2017/11/13/563894789/how-one-man-easily-tricked-high-profile-people-online-using-false-identities