As with most other aspects of this scam, your suggestion would require a certain lack of critical thinking on the accountant&#x27;s part: how would the sender know that IT had flagged their email as external before the email was sent and flagged?