Someone shared a phishing notebook with me

Question

I received a microsoft email saying
Microsoft Fabric

dsfsf fds shared this Notebook with you

Subscription Confirmation Details

You paid $399.99 on for your Five Years membership under the McAfeeSquad Plan. If this charge is not for your Purchase quickly reach us at x-xxx-xxx-xxxx
And a link to that notebook.

Since this email comes directly from microsoft I can't block it and it's treated as safe email. There is no link to the user account who shared the notebook. What else can I do?

Answer 1

The message content clearly matches common phishing patterns and should be treated as a scam, even if the notification appears to come from a Microsoft service.

Actions to take:

1. Do not click the notebook link, call the phone number, or reply to the message.
2. Verify the sender domain:
   • Genuine Microsoft support mail uses specific domains such as microsoft.com, microsoftsupport.com, or mail.support.microsoft.com. Messages about unexpected subscriptions with other domains are likely phishing.
3. Report the message as phishing:
   • In Outlook/Outlook.com, use the built‑in Report or Report phishing option so it is sent to Microsoft for analysis. This helps improve filters and does not require blocking the sender.
   • If the built‑in reporting is not available, follow the guidance in Protect yourself from phishing to submit the suspicious email to Microsoft using the official reporting methods.
4. If using Microsoft 365 with Defender for Office 365 in an organization:
   • Users can report the message with the built‑in Report button in Outlook.
   • Admins can submit the message from the Submissions page in the Microsoft Defender portal, or from quarantine if it ends up there later.
5. Monitor the account and payment methods:
   • Because the email claims a $399.99 charge, independently check bank/credit card/PayPal statements directly (not via the email links) to confirm there is no real transaction.
   • If any unauthorized charge is found, work with the bank or payment provider to dispute it.

If there is concern that the Microsoft account or Outlook.com account might have been compromised, follow the account‑recovery and protection steps in the Outlook.com security guidance (for example, changing the password and reviewing recent activity).

---

References:

• How do I know if an email from Microsoft support is genuine?
• Protect yourself from phishing
• Phishing and suspicious behavior in Outlook
• How do I report a suspicious email or file to Microsoft?
• Help protect your Outlook.com email account
• Is this legit email also? - Microsoft Q&A
• Email from M!CROSOFT - Microsoft Q&A
• I think I'm being scammed, but I want to make sure. (Though I may be in the wrong place.) - Microsoft Q&A