When one of your debtors has received an email from an email address that is not linked to iController, but has the iController-domain name, you can suspect that it concerns a phishing mail.
To be sure, please check two things:
- Is the receiver registered as a contact in iController?
- Have you've send this email? Can you find that specific email in your ‘sent items’ folder of iController?
When the answer above is twice ‘no’, it is probably a case of phishing.