See here for a basic example of a payroll phishing scam. In this message, a threat actor uses a unique first and last name but an obviously fake email address, requesting a change to their direct deposit information. While this message does have fairly apparent indicators of social engineering, it serves as an effective example of basic phishing techniques.