From what I've seen so far, this client did two things wrong:
* They scoffed at the invoice
* They told the vendor to send the invoice to legal@
If the client had declined to do EITHER of those things --- not both, just not do one of them --- there wouldn't be even half as much drama as there is now. "Send it to legal@" was just a dumb move.