The first clue is usually boring. A tax refund check never arrives. A state business-registry email says “access granted,” but no one at the ...