Inbox Detective — Clue Before Click Game 2: The Mimic Files
Your mission

Stop a confidential executive request before the attacker gains momentum.

Investigate how the same identity is reinforced across email, text, and voice. Collect at least 5 clues, identify the process bypass, then make the call.

Scout, the Inbox Detective mascot Scout is on the case
Step 1 of 4 Inspect the email
1 Read the email. Click any detail that feels suspicious.
Messages9:42 AM
D
Mara Chen — CEO+1 (646) 555-0184
Alex, Mara here. Did you see my confidential request?
The purchase site is slow. Buy the cards at any nearby store instead.
After purchase, scratch the backs and text me clear photos of every code.
Text message
Voicemail transcriptUnknown caller · 9:47 AM
“Hello, Alex. This is Daniel from Mara’s executive support team. She asked me to make sure the recognition purchase is completed. Finance has already approved this as an executive exception, so there is no need to wait for the normal purchase workflow. Do not call Mara directly because she is presenting to the board. Call me back as soon as the cards are purchased.”
Callback number+1 (202) 555-0166Not listed in the company directory
Final decision

What should Alex do with the gift-card request?

Choose the safest response based on the clues you collected.