Processes in Microsoft 365 for setting up Office apps, redeeming product keys, and activating licenses.
Could you share a screenshot of the email, covering your name, email address, order numbers, QR codes, and other personal information? It is not possible to confirm whether the offer is legitimate from the description alone. Please do not click any links or provide payment, password, or personal information. Instead, open a new browser window and sign in directly at account.microsoft.com/services. Any genuine subscription or upgrade associated with your Microsoft account should normally be visible there. Microsoft also warns that a displayed sender address can be spoofed in phishing messages.
Until its authenticity is confirmed, you can report the message as phishing through Outlook’s Report > Report phishing option.