Important information like invoices and payment instructions must be vetted no matter how they’re received.