Suspicious Login Issues

How to Identify Fake Microsoft 365 Business Purchase Email Scams

Maira Mehtab Sep 20, 2026 869 views

Question details

The user received a fraudulent email claiming a Microsoft 365 Business purchase was made, which bypassed spam filters despite being a phishing attempt.

Product: Microsoft 365
Device & OS: not provided
Scenario: Receiving a suspicious email thanking the user for a Microsoft 365 Business purchase they did not authorize.
Observed behavior: The email looks legitimate and passes spam filters, but contains spoofed Microsoft branding, mismatched recipient addresses, and fraudulent contact numbers for cancellations.

Before you start

Do not click any links, download attachments, or call any phone numbers provided in the suspicious email to prevent unauthorized access or malware infections.

Solution 1Recommended

Verify the Email Sender via Headers

Inspecting the raw email headers helps you see the actual sender's address instead of the fake display name.

Scammers often spoof the 'Display Name' in an email to make it look like it comes from Microsoft. Checking the actual Return-Path and From addresses in the raw headers will expose the true sender.

Open email details

Open the suspicious email in your email client (e.g., Gmail) and click the 'More' (three dots) icon next to the reply button.

View original message

Select 'Show original' or 'View message details' to open the raw email header data.

Inspect the From and Return-Path fields

Check the 'From' and 'Return-Path' fields to see if the domain is actually Microsoft (e.g., @microsoft.com) or a random, unaffiliated address.

Solution 2

Check Microsoft Account Order History Directly

Verify if any actual purchases were made by logging into your official Microsoft account securely.

Solution 3

Report and Delete the Phishing Email

Secure your inbox by reporting the scam and permanently deleting the fraudulent message.

Free Microsoft Office alternative

Switch to WPS Office for a Secure, Free Office Suite

If you are tired of navigating confusing Microsoft 365 subscriptions and worrying about related phishing scams, consider switching to WPS Office. It provides a complete, lightweight, and free office suite that is highly compatible with Microsoft formats without the subscription hassle.

1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
2. Install the software: Run the installer and follow the on-screen instructions to set up WPS Office on your device.
3. Open existing files: Double-click your existing Microsoft Office documents to open and edit them seamlessly in WPS Office.

Highly compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).No mandatory recurring subscriptions required for basic productivity tasks.Lightweight application that runs smoothly on Windows, Mac, and Linux.Familiar user interface for a seamless transition from Microsoft Office.

microsoft office alternative - wps office

Frequently Asked Questions

Why did this fake Microsoft 365 purchase email bypass my spam filter?

Scammers often use advanced spoofing techniques, legitimate-looking formatting, and carefully crafted text-based content to trick email providers' spam algorithms into thinking the message is a safe, official receipt.

What should I do if I accidentally called the phone number in the fake email?

Hang up immediately. If you provided any personal or financial information, contact your bank to secure your accounts, cancel potentially compromised cards, and monitor your credit reports for suspicious activity.

Can I get a virus just by opening the fake Microsoft email?

Merely opening an email text is usually safe in modern email clients, but clicking on embedded links, downloading attachments, or allowing external images to load can expose your device to malware or tracking scripts.

Microsoft Office Security Issues