The things to note are:
- The email address of the sender is "ampress.com" Sounds similar to Amex.com, but certainly NOT the same.
- While the privacy statement indicates my "account information" is included, nowhere in the email does it name me personally.
- Any attachment that looks this odd just isn't to be trusted.
I'll post more examples as I receive them. This one was pretty basic and some are quite impressive in just how closely they'll mimic legitimate sites.