The original message:

What gave it away:

 

If you aren’t sure if it is legitimate:

Report by using the PhishAlarm button or by forwarding to cybersecurity@mtroyal.ca.

 

 

Search terms – order, purchase, invoice, attachment