Did you click a malicious link and pay an invoice?