A Texas school district is out $2.3 million after falling victim to a phishing email scam.

The Manor Independent School District recently announced it is working with the Manor Police Department and FBI to track down a scammer who siphoned about $2.3 million from the district after a single employee responded to a phishing email. Phishing is a type of social engineering scam usually disguised in a fraudulent email with a criminal posing as a legitimate contact or institution, such as a bank, to obtain sensitive information.

The school employee who fell victim to the phishing scam sent money through three separate transactions to a fake bank account in November before the scam was uncovered.

School officials said there are “strong leads” in the case, which is ongoing.

The district has more than 9,000 students.

Detecting a Phishing Scam

Many phishing emails have common features that should serve as a red flag to not follow the email’s instructions, click on links or download attachments. Common features include spelling errors, a time-sensitive message and a request for personal information. Also, be on the lookout for slight variations in the sender’s email address, such as an altered letter or character from the legitimate email address, in at attempt to deceive the person receiving the email.