Just in case…
There are some domains receiving email with subject lines similar to “FW: Reference Number #30901588, Last Payment Notice”, “FW: Invoice #81012997 from DataCorp Inc.” etc.
Please issue an alert to all your users that if they receive an unexpected email with a similar subject line they should not open it. If in doubt that an ‘expected’ invoice email is valid or not please feel free to send it across to us for a quick once-over.
Keep fighting the good fight