Back to Phishing Emails

⚠ Verified Phishing Email

Do not click any links in this email. Do not call any phone numbers listed. Report it to your email provider as phishing.

Why this subject line is flagged

TitanAlert lists this as a verified Microsoft / Windows Phishing phishing pattern. Criminals reuse subject lines like this to trick people into clicking links or handing over login details. A common hook in similar messages: Click to renew or call to cancel; phishing page captures card details Messages may spoof "Microsoft Billing <billing@microsoft-renewal.com>" — the visible sender can be faked. Do not use links or phone numbers from the email. Forward the message to your provider as phishing, and report fraud at reportfraud.ftc.gov.

"Your Microsoft 365 subscription has expired"

Phishing Email Subject Line

Spoofed Sender

Microsoft Billing <billing@microsoft-renewal.com>

Scam Category

Microsoft / Windows Phishing

Typical Call to Action

Click to renew or call to cancel; phishing page captures card details

What To Do

  1. 1.Do not click any links or call any numbers in the email.
  2. 2.Mark the email as phishing/spam in your email client.
  3. 3.Forward phishing emails to reportphishing@apwg.org.
  4. 4.Report to the FTC at reportfraud.ftc.gov.
  5. 5.If you clicked a link, change your passwords and monitor your accounts.