Trusted Microsoft Email Used for Scams

A legitimate Microsoft email address, no-reply-powerbi@microsoft.com, is being used by scammers to send fraudulent messages. This address is officially associated with Microsoft's Power BI service and is meant for legitimate subscription notifications. The scam emails falsely claim that a $399 charge has been made and provide a phone number for recipients to dispute the transaction.

During a phone interaction, scammers direct victims to download remote access applications, potentially allowing them to control the user's computer. Security researchers indicate that attackers exploit a Power BI feature allowing external email addresses to subscribe to reports. This abuse adds a layer of credibility, bypassing traditional email security by using a trusted domain and avoiding malicious links or attachments.