The original message:

What gave it away:

 

If you aren’t sure if it is legitimate:

Report using the PhishAlarm button or by forwarding the email to cybersecurity@mtroyal.ca

 

 

Search terms – Purchase, order, confirmed, attached, invoice