Details of Scam:
1. Fake invoice contains an email address and phone number to call saying it’s for a refund or to make you call to get a refund for something you did not purchase.
2. User is asked for credit card and/or bank details and sometimes instructed to install malware
3. Fraudulent charges then appear on the card, funds may be withdrawn from bank, and devices infected if malware installed as instructed.
To avoid filters, these emails usually contain an image versus text. Legitimate messages are rarely just an image.