It's only going to be legit if  YOU asked for the invoice. If it comes from some random it's never going to be a legit ask. If they're asking for sats then zap their note or have DM's going with them. The invoice will resolve itself as a button in DM's making it much easier to verify who you're zapping.