Social engineering is real and a first line of defense problem for most organizations. This is yet another strong example of the damage that can be inflicted through a well-placed scam.
https://blog.knowbe4.com/city-of-el-paso-victim-of-3-million-dollar-phishing-scam