Public
- Public
- Network
- Groups
- Popular
- People

Complete a purchase by August 7, 2025 to keep your account active ================================================================= You are receiving this email because your associated Microsoft Entra ID tenant (tenant ID 20b236ab-a99b-431a-b36d-8008b1dccd8c) has been inactive for more than 200 days. Required action: To continue using your tenant, make a purchase before August 7, 2025. If you don’t make a purchase before this date, your next purchase with Microsoft will require a new Microsoft Entra ID tenant to continue using Microsoft services. Make a purchase > Learn more about the Microsoft data retention policy. If you have questions or need help, contact support. Account information -------------------

Download link

Complete a purchase by August 7, 2025 to keep your account active ================================================================= You are receiving this email because your associated Microsoft Entra ID tenant (tenant ID 20b236ab-a99b-431a-b36d-8008b1dccd8c) has been inactive for more than 200 days. Required action: To continue using your tenant, make a purchase before August 7, 2025. If you don’t make a purchase before this date, your next purchase with Microsoft will require a new Microsoft Entra ID tenant to continue using Microsoft services. Make a purchase > Learn more about the Microsoft data retention policy. If you have questions or need help, contact support. Account information -------------------
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/823/166/971/946/341/original/56ca09687f926503.png

Notices where this attachment appears

BrianKrebs (briankrebs@infosec.exchange)'s status on Wednesday, 09-Jul-2025 15:02:55 CEST BrianKrebs

I recently received an email that at first glance appeared to be a well-crafted phishing message, warning that my Microsoft Entra ID was going to expire in a month if I didn't make a purchase. The only piece of information in the message was my supposed Entra ID.
After checking with Microsoft it appears this automated message is legitimate, and it is in reference to a Microsoft Teams trial account I created for a day and then abandoned. But apart from the Entra ID, which isn't mentioned in any prior communications from Microsoft, there is zero context for the user.
How hard would it be for Microsoft to include just a tiny bit more information in each message? Like, "Hey, this message is about an account created 5 years ago, for Teams" or something. Otherwise these marketing messages train users to fall for phishing scams.

In conversation about 3 days ago from infosec.exchange permalink