Your hello payment has passed validation – mr giansur 01/13/2026
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: Hello, payment, premium, membership, renewal, debited, automatically, recapitulation, validation
Order MDTZ7UQAQ received on Wednesday, 07 January 2026 – 3-14-03 01/06/2026
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: GeekSquad, subscription, account, service, membership, renewal
Invitation: The request No. KCSJD7N3 for is being processed – Flynn Stout – 12/03/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: Webroot, subscription, expired, payment, auto debit, membership, renewal
Notification: Welcome your order No. FSP1TU0W payment – Google Calendar 12/08/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: Premimum, protection, membership, renew, subscription,
Webroot, deluxe
Order confirmation: $362.49 verification in progress – Austin Oliver 11/04/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: Geek Squad, protection, plan, billing, department, services, payment, subscription
Here is your new invoice 837473G3H7 from Revenue Oprations – 11/21/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: Home PC Protection Plus, quickbooks, invoice
Payment method update required – WordPress 11/20/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: Domain, renewal, reminder
New appointment: Your Norton subscription (Order ID: Nov-25/PAID) – Renotification 11/17/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca
Search terms: Norton, subscription, calendar, appointment, Acuity, scheduling, support, account
Payment for arrangement No 1837572492-5485 approved – (Your username) 06/13/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca.
Search terms: McAfee, membership, premium protection, automatic, renewal
Hello: Review your recent transaction 4828-Imtxabe with us – (your username) 04/01/2025
The original message:

What gave it away:

If you aren’t sure if it is legitimate:
Report the email to Google or forward the email to reportphish@mtroyal.ca.
Search terms: Subscription, GeekSquad, account, automated, deducted, service assistance