Do not download your "statement" from an email.
Take proper control over the alerts on your Android phone.