In order to cancel the fake order, you'll either have to click a link or call them on the telephone. Either way, the ultimate goal of the scammers is to get you to give them some personal information. They'll claim it's for the purposes of canceling the fake order.

An invoice from an online retailer or supplier for a purchase or order that you did not make. The attachment appears to be a protected or locked document, and you need to enter your email address and password to open it.

On iOS do what Apple calls a "Light, long-press". Never click any links or attachments in suspicious emails or Teams messages. If you receive a suspicious message from an organization and worry the message could be legitimate, go to your web browser and open a new tab.

Learn what to do if you find charges you don't recognize from Microsoft.

Not sure what to do if you get a text message from Microsoft? Here's some info that might be helpful.

Make your account even more secure with optional passwordless sign-in. If you see the error message, "We couldn't find an account with that username", or think your account has been hacked, learn how you can recover your account. Open the Sign-in Helper for support options or hacked account issues.

To review app, game or subscription purchases, track orders or view and print invoices, sign in to the order history page on your Microsoft account dashboard.

If you need to restore a previous purchase of Microsoft 365 apps or Copilot Pro on your Mac, iPhone, or iPad you might be able to do that through the app store. Here's how.

Open the digitally signed message. Look at the Signed By status line to check the email address of the person who signed the message. It isn't enough to check the email address in the From line—you want to verify who actually signed the message, not only who sent the message.

Anyone can copy an email signature, which essentially is a customizable closing salutation. But a digitally signed message can come only from the owner of the digital ID used to sign it. The digital ID provides verification of the sender's authenticity, thereby helping to prevent message tampering.