The activation link itself is , time‑bounded (default 48 h), and cryptographically signed . It is generated once per invitation, but the language rendering is dynamic – no need to send separate emails per language.
Requests for an "activation link" or "multilingual download" from unofficial sources are common hallmarks of invoice scams . These scams often trick users into clicking links that install malware (spyware, ransomware) or harvest login credentials through fake login pages.