Intuit Quickbooks is another service that gets used like this. My mom received some fraudulent invoice from an Intuit Quickbooks user, which was from the legit Intuit domain since it was sent by the service, which claimed that she owed "PayPal, Inc" $600 for something or other. I told her to delete the email and reported the activity to Intuit but never heard back.