You'll get domain renewals (among other things, but this is the most prevalent I've seen mailed) that aren't from your registrar as well, with language indicating your domain is about to expire. The price is usually astronomically high on these, and like yours above they are legally "scamming" your company to give them money.

But the worst type of scam you'll (hopefully never) ever see is when someone social engineers information from an employee or dumpster dives your location and locates some of your suppliers. They will then start mailing/faxing/emailing invoices under your suppliers name or start calling pretending to be your supplier and asking for the money to be sent to their bank account, usually it's some emergency (an order will not ship on time, your account will be closed, etc).

If it's emailed, the link to pay is likely a phishing attack as well. It's not always a bill, it can be sent as a simple correspondence from what appears to be a company or someone you do business with, just to get an employee or you to click the link.

It gets to be a real headache and if you're not paying the bills yourself, make sure whoever you have handling accounts payable is up to speed on these scams or they could end up paying the scammers or clicking the link thinking they're saving the day when they've just f'd you good.

Email phishing attacks are the biggest pain in the ass these days. Creating a whitelist on your email server is a good idea, you just have to occasionally weed through all the rejected email to see if something legit got caught (time consuming and can still burn you) or just wait to see if someone legit asks if you received their email or not (much easier and you can always add them to your whitelist).