The University of Toronto Security Matters website has some excellent information about identifying phishing attempts. Please take a few minutes to familiarize yourself with the most common types of phishing scams. Additionally, each member of your unit should be enrolled in in UTORMFA, as an extra layer of security to your e-mails. Lastly, your unit may wish to employ a VPN to protect yourself and your colleagues when connecting from remote locations.
If you are ever unsure about the legitimacy of an e-mail approval or E-Signature, consider getting in touch with the sender via an alternative means of communication: Microsoft Teams, phone call, in-person conversation.