An email arrives on official Marin County letterhead, written in bureaucratese—it’s an invoice for $7,500 in building fees. Seems plausible enough. But the note was in fact ersatz, part of a new phishing scheme targeting those who have applied for permits through the county’s Community Development Agency. The emails appear to come from Sarah Jones, the agency’s director, and uses information pulled from the county’s public building permit portal, including property addresses and contact details.…