"Office 365 Email Quota Almost Exceeded"
The email message below, which claims that the recipients' Office 365 email account storage has almost exceeded its limit and they should click on a link to add additional storage, is a phishing scam. The fake email message was created and sent by cyber-criminals to steal the recipients’ email account username and password. Once cyber-criminals have gotten their victims’ email account credentials, they will hijack their accounts and use them fraudulently. So, recipients of the fake email message and others like it should delete them and never attempt to click on the links or follow the instructions in them.
Recipients of the same message who have already followed the instructions in it should change their email account's password immediately before their accounts are hijacked and used fraudulently.
The "Office365 Email Quota Almost Exceeded" Phishing Scam
From: "Microsoft Office" - brent@ncdinc.net
Subject: Office365: Email quota almost exceeded
Date: 19 December 2017 at 11:12:41 CET
To: undisclosed recipients:;
Dear Client,
Your storage space for your Office account is almost full.
92% Used
To prevent your Incoming/Outgoing mail from getting bounced back,
Extend your mailbox quota to prevent permanent loss of incoming messages.
Add 5 gig for free / 1Year
Add 10 gig for 10 / 5Years
© 2017 Microsoft
Terms of use Privacy & Cookies
The link in the fake email message goes to a fake Microsoft Outlook, Hotmail or Live website. On the fake website, visitors will be asked to sign-in, if they attempt to do so, their email usernames and passwords will be sent to the cybercriminals responsible for the phishing email message. Once the cybercriminals have gotten their potential victims Microsoft account credentials, they will gain access to their accounts, hijack the accounts by changing passwords, and use the accounts fraudulently.
Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.
Note: Some of the information in samples on this website may have been impersonated or spoofed.