This is a classic account deactivation phish that pretends to be from Microsoft Office 365. It creates a false sense of urgency and threatens you with account deactivation to trick you into hastily clicking the link. However, if you hover over the big red “VERIFY NOW” link, you will find that it goes to a site that isn’t from Microsoft (or UVic). Other signs that something isn’t right about this email include the awkward wording/bad grammar and the long random text in the sender address and subject. If you manage to find the end of the sender address after all that random text, you can then see that the sender is not from UVic or Microsoft.
From: <SysadminSExchangeServerGE8YI27DX[…long random text omitted]
Subject: Authenticate Your Account Activity #42e77c85919f7bec71588667c799a78fOffice 365
Attention [username redacted]
As part of our scheduled security and compliance process, we will be deactivating inactive Microsoft accounts on August 22, 2025
Please verify your account status ([redacted]@uvic.ca), remains active by completing the verification below.
[Link: VERIFY NOW]
To avoid any disruption, complete this verification within 48hrs.