Re: "phishing attacks [..] tend to be very difficult for non-specialists to spot"
I had the same kind of issue with BT Global Services once, when they sent us a quotation for a new WAN link as an Excel file instead of the usual PDF one.
So we got all the formulas for calculating the final price...
Very handy for getting a rebate afterwards ;-)