The original message:

What gave it away:

If you aren’t sure if it is legitimate:

Report the email to Google or forward the email to reportphish@mtroyal.ca.

 

 

Search terms: Login, authenticator, session, expire, access, MFA, QR code