Glad you caught that. I've seen so many fake emails that look real at first glance. Always hover over the sender's name to see the actual email address (it's shocking how often it's a misspelled version of a real one). If anything feels off, call the person directly to confirm. Teaching your team to do the same can save a lot of headache down the line.
Yeah that hover trick @max766 mentioned is key. A buddy of mine just got nailed last month because he didn't check. Email looked exactly like it came from his boss asking for urgent gift cards. He lost five hundred bucks before he realized the address was "bossname@companyy.com" with an extra Y. Now his whole office does the call to confirm thing.