Why that "invoice" attachment deserves extra suspicion

Unexpected invoices, delivery notifications or "remittance advice" attachments are among the most common phishing lures because they're plausible and create urgency. Check whether you were expecting it, verify the sender's actual address, and never enable macros or "editing" on an Office document you weren't expecting.

Coach's tip: if in doubt, open it in a company sandbox or preview if your email security offers one, rather than downloading it straight to your PC.