Thanks Ian, I had one but I delete anything that looks remotely like a threat. I've had a few like this recently, all requiring some sort of action on 'invoices due'. I can see it being a problem for a company with lots of purchases, but for a small operation like ours a rogue payment demand stands out like a sore thumb - I know exactly what I've ordered and from whom, so hopefully won't get caught.