Unknown invoice in the email requiring the user to enable macros in Word.
That is an awful lot of steps to get activated.
I suggest you take my approach, any unknown e-mail will be deleted without reading it. I know who I communicate with or I don’t read it… In other words, no point in trying to send me one if I don’t know you, and even then I am suspicious.
There is absolutely nothing positive coming from being curious about e-mails.
No-one is going to send you an e-mail offering you anything for free.
Invoices NEVER require macros to be activated.
No-one is going to call you and offer to help with your computer.
If they do, you are about to get butt-fucked.