Phishing Alert: Receipt

Some U-M community members reported receiving this email. It is fraudulent or malicious. Do not respond, click any link in it, or provide personal information or money. See Phishing & Scams for more tips. If you need help, contact the ITS Service Center.

Date Sent: 
Tuesday, August 31, 2021

Phishing Email Summary

This phishing email has been reported by a number of persons in the U-M community. The email appears to be an receipt for a purchase that the recipient did not make. Recipients report that they are often Bcc:ed instead of being list as the recipient (person in the "To" field). The email attempts to get the recipient to call a phone number under the guise of fixing a mistake or addressing fraud. 

If you receive such an email, do not reply, call, or follow links in it. Do not give any personal information or credit card numbers.

An image of the email is provided below. Plain text of the email is also provided for those using a screen reader.

Phishing Email Text






Apple Store




Aug 30, 2021




TYPE          PURCHASED FROM                PRICE

iCloud: 10 TB Storage Plan

Monthly | Aug 30, 2021

iCloud Storage

USD 399.99

Logged in from an unknown device from Belgium location IP    

Subtotal USD399.99

Tax USD0.00


USD 399.99

If you have any questions about the bill, visit iTunes Support. This email confirms payment for the iCloud storage plan listed above. You will be billed each plan period until you cancel by downgrading to the free storage plan from your iOS device, Mac or PC.

You may contact Apple for a full refund within 15 days of a monthly subscription upgrade or within 45 days after a yearly payment. Partial refunds are available where required by law.

If you did not authorize this purchase, please visit the Apple Store Cancelation Form

Learn how to manage your password preferences for iTunes, iBooks, and App Store purchases.

Contact our Fraud Protection Team if it was not done by you at the earliest at 1 -4( 214 )5-5( 271 )6-6( 8789 ).2355335

Phishing Email or Site Screenshot: 
Screen shot of the fake receipt sent in this phishing email.