The very next day, John decided to investigate further. He sent an email to the IT department, asking about the "autocom 202023 password installation link" and if it was a genuine email.