Suspected scam emails in regards toone drive and microsoft power ap

Question

I have recieved 2 emails supposedly from microsoft. one tells me my one drive will be deleted unless I upgrade as of Jan because I am over the limit in storage space. I have checked my microsoft one drive account and am no where near my limit. The 2nd email states microsoft will be billing me $590. for power ap for business and unless I cancel today this subsription today the charge will be unrefundable. I do not know what power ap is and I don't use an app of that name, plus I use 365 home edition NOT business. These emails do appear to come from Microsoft though. Are they spam or legitamate? If legit where do I address a cancellation of the power ap, and my one drive account. Checking me account I do noe see a problem/ongoing subscription with microsoft that these emails are detailing.

Answer 1

These emails are most likely phishing or scam messages, not legitimate Microsoft billing or account notices.

Why they look suspicious:

• The OneDrive message claims storage deletion, but the account check shows usage is nowhere near the limit.
• The Power Apps for business charge does not match the stated setup of Microsoft 365 Home and no visible business subscription appears in the account.
• Scam emails often create urgency with threats like immediate deletion, same-day cancellation deadlines, or nonrefundable charges.
• Email sender names and even visible addresses can be spoofed, so an email can appear to come from Microsoft when it is not trustworthy.

What to do:

1. Do not click links, open attachments, or call any phone number in either email.
2. Verify account status only by signing in directly to Microsoft services, not through the email.
3. Since the Microsoft account and subscription pages do not show the claimed OneDrive or Power Apps issue, treat the messages as junk or phishing.
4. Mark the messages as spam or phishing in the mail client, then delete them.
5. If Outlook shows the sender as unverified, shows a ? sender image, or shows a via tag with a different actual sending domain, that is another warning sign.
6. If a message includes an attachment asking to enable content in Word or Excel, do not enable it. That can be malicious.

About the OneDrive message:

• Genuine personal OneDrive communications can come from @mail.onedrive.com, @notificationmail.microsoft.com, or @infomail.microsoft.com.
• If unsure whether a OneDrive email is legitimate, sign in directly to OneDrive to review the account rather than using the email link.

About the billing-style message:

• Fake order and fake billing scams commonly use pressure tactics such as “cancel today” or “charge is nonrefundable.”
• Microsoft support-related email should come from recognized Microsoft domains such as microsoft.com, microsoftsupport.com, mail.support.microsoft.com, office365support.com, or techsupport.microsoft.com. A mismatched or misspelled domain is a strong scam indicator.

If extra verification is needed:

• Check the sender domain carefully.
• Hover over links without clicking to inspect the real destination.
• If the message still seems suspicious, do not interact with it.

No cancellation action is indicated from the described account status. If the subscription or charge were real, it would be visible in the Microsoft account or subscription details already checked.

---

References:

• Why did I get a message saying my files will be erased?
• How to determine if an email from Microsoft support is genuine
• Phishing and suspicious behavior in Outlook
• Protect yourself from phishing
• How to spot a "fake order" scam