How to Handle Fake Microsoft Office 365 Defender Charge Phishing Emails
Question details
The user received a suspicious email claiming a $599.99 charge for a fake subscription to Microsoft Officer 365 Defender Pro Security and wants to know how to respond safely.

- Product
- Microsoft Office 365
- Device & OS
- not provided
- Scenario
- Receiving an urgent email about a large, unexpected charge for a Microsoft security product with instructions to call a phone number to cancel the subscription.
- Observed behavior
- The email uses a fake product name, states a high financial charge, and pressures the recipient into calling a fraudulent phone number to steal personal or payment information.
Do not click any links, open any attachments, or call the phone number provided in the suspicious email. Interacting with the sender can compromise your device and personal information.
Identify, Report, and Delete the Scam Email
Take immediate defensive action by identifying the fraudulent elements, reporting the email to your email service provider, and deleting it permanently.
Phishing emails rely on panic. By carefully reviewing the details without interacting with the links or phone numbers, you can easily spot inconsistencies that reveal the scam.
Look closely at the email text. Scams often contain misspellings (such as 'Officer' instead of 'Office') and threaten unexpected, high charges (like $599.99) to cause panic.
Never call the phone number listed in the email to cancel the supposed subscription. Scammers use this tactic to trick you into granting them remote access to your computer.
Use your email client's built-in reporting feature. In Outlook, select the message, click on 'Report', and choose 'Report Phishing'. In Gmail, open the email, click the three vertical dots next to the reply button, and select 'Report phishing'.
Once reported, move the email to your Trash or Deleted Items folder, and subsequently empty the folder to ensure the email is completely removed from your device.

Verify Your Microsoft Account Billing Safely
If you are concerned that a real charge might have occurred, check your official Microsoft account billing history independently of the email.
Take Action if You Already Interacted with the Scam
Crucial steps you must take immediately if you accidentally called the fraudulent number or provided your credit card details.
Switch to WPS Office to Avoid Expensive Subscription Concerns
Scammers often prey on the fear of high subscription costs associated with Microsoft Office 365. WPS Office offers a free, lightweight, and highly compatible alternative, so you never have to worry about unexpected software subscription charges.
- 1. Download the installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install WPS Office: Run the downloaded installer file and follow the on-screen prompts to complete the quick setup.
- 3. Open your existing files: Launch WPS Office and directly open your existing Microsoft Office documents without any conversion issues.

Frequently Asked Questions
Why did I receive this Microsoft Defender phishing email?
Scammers send these emails in bulk to thousands of random email addresses. They hope to panic recipients with a high fake charge, prompting them to call a fraudulent support number where the scammers will try to steal money or gain remote access to the computer.
Does Microsoft actually call or send emails asking to cancel subscriptions via a direct phone number?
No. Official Microsoft billing communications will never ask you to call a specific phone number to cancel a charge or verify a payment. All legitimate subscription management is handled securely through the official Microsoft account dashboard online.
How can I tell if an email from Microsoft is genuine?
Genuine emails from Microsoft will come from a verifiable domain like '@microsoft.com' or '@accountprotection.microsoft.com'. Always click on the sender's name to view the actual email address, and look out for typos, poor grammar, or urgent demands for money, which are clear signs of a scam.
What happens if I called the number in the email?
If you called the number, scammers likely tried to convince you to install remote desktop software or pay a 'cancellation fee'. Disconnect your device from the internet immediately, uninstall any remote access tools they had you download, and run a full system malware scan.




