Thanks for the replies... some good content there to review!
I normally spot the phishing emails easily. While they are getting better with proper English and limited to a short vague common email, when attached from a "re:" / reply from a real previous. But I guess one got me...
I will open the email headers and copy the link address, then search for results or just call the client/supplier or just create a new email to them asking about it. Still had to delete more emails than I care to count, had to deal with the calls from clients/suppliers asking about it, and take the time to change all passwords on a digital platform, and now trying to figure out the best way forward.
We use GoDaddy Workspace. They want to move away from it and they plan to stop offering it. Not sure which email system & hosting to use now. Just another turning point in a digital world. Research what you can and hope it's valid input that can minimize the risk. The human error is gonna happen... shame the foundation in which the hackers are able to stay in the shadows is only going to get worse.
Again... thanks for the replies. Time to finish up and get back on track.