Contact your client immediately and tell him not to click on any links or respond in any way to the email. Reiterate how you do invoicing. Consider sending an email out to all your clients telling them not to respond to similar emails and to only use the invoicing system they normally use.