Suspicious Login Issues

How to Handle a Suspicious Office 365 Order Email

WPS Editor Sep 25, 2026 869 views

Question details

The user needs to know the correct protocol for safely handling an unexpected or suspicious Office 365 order confirmation email.

What to Do When You Receive a Suspicious Office 365 Email

Product: Microsoft Office 365
Device & OS: not provided
Scenario: Receiving an unexpected email claiming to be an Office 365 order confirmation, which may contain links, attachments, or requests for personal information.
Observed behavior: The fraudulent email attempts to deceive the recipient into replying, clicking malicious links, or opening harmful attachments under the guise of an official Microsoft order.

Before you start

Do not reply to the sender, click any embedded links, or download any attachments from the suspicious email. Keep the message closed or avoid interacting with its contents while you assess its authenticity.

Solution 1Recommended

Report and Delete the Suspicious Email

Use this solution to safely remove the immediate threat and notify your email provider of the phishing attempt.

Phishing emails often use high-pressure tactics, such as unexpected billing charges, to trick you into acting quickly. By reporting the email rather than just deleting it, you help improve spam filters and protect other users.

Report as Phishing via Email Client

Open your email provider (such as Gmail or Outlook). Select the suspicious email without clicking its contents. Click the 'More options' (three dots) menu and select 'Report phishing' or 'Report as junk'.

Forward to Microsoft

If you are using an Outlook or Hotmail account, you can select the message and click the 'Junk' button on the ribbon, then choose 'Phishing'. You can also forward the message directly to phishing@microsoft.com.

Delete the Email

Once the email is reported, permanently delete it from your inbox and clear it from your 'Deleted Items' or 'Trash' folder.

Verify Official Communications: Genuine Microsoft account emails will typically come from an official @accountprotection.microsoft.com or @microsoft.com address.

Solution 2

Secure Your Account with Two-Step Verification

Enable extra security measures on your Microsoft account to prevent unauthorized access even if your password is compromised.

Free Microsoft Office alternative

Avoid Subscription Scams with a Free Office Alternative

Tired of dealing with Office 365 subscriptions and the phishing scams associated with them? WPS Office is a completely free, lightweight, and secure alternative that requires no complex online subscriptions for basic document editing.

1. Download the Installer: Visit the official WPS website and download the free version for Windows, Mac, or Linux.
2. Install WPS Office: Run the downloaded installer and follow the quick setup wizard to install the software on your device.
3. Open Your Files Safely: Launch WPS Office and directly open your existing Microsoft Office files without needing a Microsoft account or subscription.

Completely free to use with no hidden subscription charges or confusing billing emailsSeamlessly compatible with Microsoft Word, Excel, and PowerPoint file formats (.docx, .xlsx, .pptx)Lightweight installation ensures fast and secure local document editingFamiliar user interface makes switching from Microsoft Office instant and effortless

microsoft office alternative - wps office

Frequently Asked Questions

How can I tell if an Office 365 order email is genuinely from Microsoft?

Check the sender's actual email address by clicking on their display name. Genuine Microsoft emails use the @microsoft.com or @accountprotection.microsoft.com domains. Be wary of generic greetings, poor grammar, or urgent demands for action, which are classic signs of phishing.

What should I do if I accidentally clicked a link in a phishing email?

Immediately disconnect your device from the internet to prevent further malware downloads. Run a full system scan using your antivirus software. If you entered any passwords on the linked site, change them immediately from a different, secure device.

Can my device be infected just by opening the phishing email?

In most modern email clients, simply opening the email text or viewing its HTML content is generally safe. The risk of malware infection typically occurs only when you download an attached file or click on embedded malicious links within the message.

How do I check my actual Microsoft billing history if I am unsure about the email?

Open your web browser and manually type account.microsoft.com to log into your official Microsoft account. Navigate to the 'Payment & billing' section and select 'Order history' to verify if any real purchases correspond to the email you received.

Microsoft Office Security Issues