The original message:

What gave it away:

 

If you aren’t sure if it is legitimate:

Report by clicking the PhishAlarm button or forwarding to cybersecurity@mtroyal.ca

 

 

Search terms: order, processed, payment, debited, invoice, account