It arrived on a Tuesday, buried between a LinkedIn notification and a spam email about cryptocurrency. The subject line was deceptively simple: