I found this email in my inbox last night:

I took a screenshot and deleted personal stuff so you could see what it looks like.

Firstly, how did I know this was a scam? Simple – I don’t use Microsoft OneDrive. I have NEVER used OneDrive.

Next, if you look at the email sender it says:

’email@mail.onedrive.com’

Not even a hint of Microsoft anywhere. ‘mail.onedrive’ is a domain that has nothing to do with Microsoft. [When you register a domain, no one else can use it. But there is nothing to stop someone from registering a domain that ‘hints’ at belonging to a well known company].

And finally, do you see the big, red ‘YOU’? I put that in to highlight the poor grammar used in the body of the email. You won’t always find poor grammar, but when you do, it’s a dead giveaway. Whoever set up this scam…