A new scam is making the rounds, and it’s more convincing than many others.

It looks like a real alert from Microsoft Azure Monitor and arrives from an actual Microsoft domain, so it slips into your inbox without raising any red flags. This is why it’s tricking people.

Azure Monitor is a tool that businesses use to monitor their systems. It keeps track of performance, identifies issues, and sends alerts when something needs fixing. If you’re using cloud services, especially in Microsoft Azure, you’re likely accustomed to these notifications.

So, when you get an email about a billing problem, suspicious activity, or an account issue, it doesn’t always trigger immediate concern. That’s when the trouble begins.

These scam emails often create a sense of urgency. They might mention unrecognised charges, invoices you didn’t expect, or even claim that your account is suspended. The goal is to get you to act quickly, usually by calling a number to “fix” the issue.

The emails can actually be sent via Azure Monitor, which means they aren’t spoofed like typical scams. They’re not pretending to be Microsoft; they’re using Microsoft’s own system to send the message. As a result, many email security systems let them through without hesitation.

Azure Monitor lets users create alerts based on specific triggers, like a new invoice or account activity. The person who sets up the alert can customise the warning message.

Scammers are exploiting this feature. They create alerts with simple triggers, draft their own fake billing warnings, and distribute these emails to lists they control. The outcome is a believable and legitimate-looking email. It’s easy and it works.

We’ve seen similar tricks before with trusted platforms like PayPal and Google. The approach remains consistent: misuse a service that people already trust to deliver the scam.

If you receive one of these alerts, the best thing to do is to pause. This is crucial.

If an email is urging you to act quickly, especially to call a number or provide information, take a moment to verify it properly. Instead of clicking any links, go directly to your Azure account through your browser and check for alerts there. If there’s a real issue, it will be visible in your account.

And if you’re uncertain, reach out to your IT support for assistance before taking any action.

This situation highlights how phishing attacks are evolving. It’s no longer about poorly written emails with obvious mistakes. Many of these messages are polished, well-timed, and sent through trusted systems.

Awareness is key now more than ever. If you’re not sure your team can identify a scam like this, we’re here to help. Please get in touch.