> Surfside Beach Mayor Robert Krouse said the emailed payment request appeared genuine. “We don’t see where the town erred,” he said, so he didn’t see “why we should be paying double.”

If you didn’t err you’d only be paying single

SPF, DKIM, and DMARC folks.