Phishing emails, by which scammers and identity thieves attempt to lure you into either clicking on links contained within the email which download malware or providing personal information that will be used to make you a victim of identity theft, are nothing new. They are a staple of identity thieves and scammers and with good reason because they work. Reproduced below is a copy of a new phishing email presently circulating that appears to come from Microsoft which purports to be a receipt for a Surface Book 3 at a cost of $1,499.99. Microsoft is a popular target for this type of phishing email because its products are used by millions of people. Like so many phishing emails, this one attempts to lure you into responding by making you think someone has charged something using your name. As phishing emails go, this one is pretty good. It looks legitimate. However a telltale sign that this is a scam is that the email address from which it was sent is that of an individual totally unrelated to Microsoft and is most likely the address of an email account of someone whose email account was hacked and made a part of a botnet of computers used by scammers to send out phishing emails. As so often is the case with phishing emails sent out in massive amounts the email is not directed to you by name. It carries a legitimate looking logo, however, it is a simple matter to counterfeit a Microsoft logo. Here is a copy of the email presently being circulated:
Your details are as followed
Surface Book 3 (Windows 10 Home )
Microsoft Surface Book 3 features 1 TB of SSD storage, 24 GB RAM and upto 15.5 hours of video playback
Your order summary
Product : Microsoft Surface Book 3
Order number : ODR-29121993XZ
Payment mode : PayPal Online Payment
Your order has been shipped
Shipping address:- 1594 North high street, Jacksonville , Fl 32214
CALL WINDOWS SUPPORT at +1- 858 800 0741
Monday – Sunday 9 a.m. – 9 p.m PST
Billing or service questions ? Call +1- 858 800 0741
There are a number of indications that this is not a legitimate email from Microsoft, but instead is a phishing email. Legitimate companies would specifically direct the email to you by your name. Your name does not appear anywhere in this generic phishing email. While many phishing emails attempt to lure you into clicking on malware infected links, this phishing email tries to get you to contact their customer sevice number to dispute the charge. Of course, the phone number you are directed to in the email to contest the charge is not a phone number for Microsoft, but rather is the phone number of the scammer who will attempt to get you to provide personal information that will be use to make you a victim of identity theft. If you receive an email like this and think it may possibly be legitimate, merely call Microsoft’s customer service department at 1-800 – 642-7676 where you can confirm that it is a scam, but make sure that you dial the telephone number correctly because scammers have been known to buy phone numbers that are just a digit off of the legitimate numbers for companies to trap you if you make a mistake in dialing the real number.
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide was recently cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is to go to the bottom of the initial page of http://www.scamicide.com and click on the tab that states “Sign up for this blog.”