Register a convincing sender domain (lookalike domain or compromised email) - Configure SPF, DKIM, and DMARC to improve deliverability - Set up email tracking to measure open rates and click rates - Create a believable landing page