Spam emails with attachments ie word and excel

hi all, had a spam email with no subject just an attachment which was a word document. I opened it.. stupidly on my phone and saw that it just said something about I brought an iPhone 17. More like an invoice. Now these emails, with no subject, not context just attachments keep being emailed to me. I haven’t clicked on anything since.

I am competently paranoid now that I’ve let someone gain access to my phone. Is that possible? I did security check via settings but if there’s any advice or anyone’s own experiences with this would be helpful.

thanks