Suspicious Login Issues

How to Identify and Handle a Suspicious SharePoint Email Scam

Steve K Oct 19, 2026 868 views

Question details

The user received an unexpected email claiming a contract requires a signature via SharePoint, raising concerns about potential phishing and account security.

How to Identify and Handle a Suspicious SharePoint Email Scam

Product: SharePoint
Device & OS: not provided
Scenario: Receiving an unexpected contract signature request from a legitimate-looking delivery service like SendGrid, despite not having a SharePoint account.
Observed behavior: The user is targeted by a phishing email disguised as a SharePoint contract notification sent through a legitimate cloud-based SMTP provider.

Before you start

Do not click any links, download any attachments, or reply to the suspicious email while you investigate its legitimacy.

Solution 1Recommended

Identify and Report the Phishing Scam

Take immediate precautions to verify the email's authenticity and report it as a scam without compromising your system's security.

Scammers often abuse legitimate cloud-based email delivery services, such as SendGrid, to bypass spam filters. Even if the sender infrastructure looks real, the content may still be a phishing attempt designed to steal your credentials.

Avoid Direct Interaction

Do not click any links, open any attached PDFs or Word documents, or reply to the sender. Interacting with the email can confirm your address is active or trigger malicious scripts.

Verify the Sender Independently

If you suspect the contract might be real, contact the supposed sender through an independent, official channel (such as a known company phone number or direct website), not by using the contact details in the email.

Report and Delete

Mark the email as "Phishing" or "Spam" within your email client to help train your provider's security filters, then permanently delete the message from your inbox.

SendGrid Identity: SendGrid is a legitimate cloud-based SMTP provider widely used by businesses. However, malicious actors occasionally misuse its services to send fraudulent messages.

Solution 2

Secure Your Account if You Interacted with the Email

Essential steps to take if you accidentally clicked a link or provided personal information.

Free Microsoft Office alternative

Secure Your Documents with WPS Office

If you are concerned about cloud-based phishing scams on platforms like SharePoint or Microsoft 365, consider managing your documents locally with WPS Office. It is a highly compatible, secure, and lightweight alternative for your daily tasks.

1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
2. Install WPS Office: Run the downloaded file and follow the simple on-screen instructions to complete the installation process.
3. Open Your Documents: Launch WPS Office and directly open your existing Microsoft Office files (.docx, .xlsx, .pptx) to continue working securely.

Seamlessly highly compatible with Microsoft Word, Excel, and PowerPoint formats.Built-in document encryption and password protection features to keep local files secure.Lightweight application with a familiar, easy-to-use interface.Free to download and use without mandatory cloud dependencies.

microsoft office alternative - wps office

Frequently Asked Questions

Why did I receive a SharePoint email if I don't have a SharePoint account?

Scammers send phishing emails in bulk to thousands of randomly generated or scraped email addresses. They rely on the probability that a fraction of the recipients will panic or be curious enough to click the link, regardless of whether they actually use SharePoint.

Can a scammer compromise my device just by me opening the email?

Simply opening an email is usually safe, provided your email client is configured to block external images and scripts by default. The real danger lies in clicking the embedded links, providing login details on a fake landing page, or downloading malicious attachments.

How can I block fraudulent emails sent via SendGrid?

Because SendGrid is used by many legitimate businesses for newsletters and notifications, blocking the entire domain might cause you to miss important emails. Instead, block the specific sender's email address and report the message as phishing to help your email provider's spam filter learn to block similar scams automatically.

What should I do if I entered my Microsoft password into the scam website?

Change your Microsoft account password immediately by going directly to the official Microsoft website. If you use the same password for other services, change those as well. Ensure you enable Two-Factor Authentication (2FA) and monitor your account for any unauthorized sign-ins.

Microsoft Office Security Issues