1.Wait, look, think - Always read your messages carefully.
2.Look for phishing clues - Take a look at the email sender and their request.
3."Better safe than sorry" - Remember that you are the last line of defense against cybercrime.
The message you received had two phishing clues:
1. The sending domain is a bit different than the name of the company - floraiheaven (see the i in florai) vs. Floral Heaven.
2. Partnerships like these are not usual for your institution.