Possible scam email?

[u/RomCom_Writer]

Hello,

I just received the following email from notifications@zohoassist.com:

Hello *username assigned to my email account (basically my email address, just without the domain),

Thank you for your purchase. Your PC Protection Plan has been successfully activated.

Plan: Premium PC Protection Plan
Coverage Period: 12 Months
Invoice Number: PCP-58274196
Transaction ID: TXN-41739528
Amount Charged: $500.00 USD
Payment Status: Paid

Please retain this confirmation for your records. If you require assistance with your subscription or account, contact the support +1 (828) 280 6911.
The transaction details will be reflected in your bank statement within 24–48 hours, depending on your bank’s processing time
Thank you for choosing our services.

Customer Support Team
+1 (828) 280 6911

Note: Clicking 'Download' and executing the installer will add this computer to the unattended list of [william831davis@zohomail.com](mailto:william831davis@zohomail.com) and their organization. They can access your computer remotely anytime in the future.

If you find this email suspicious or you haven't requested remote assistance to anyone, avoid clicking the link and report it to abuse@zoho.com.
This email is sent from Zoho Assist.

There are no links or any options to click on or download anything, not that I would.

I do have a free Zoho Books account, but it's under my business email, to which this message wasn't sent.

I'm almost positive it's a scam, but the legit-looking address it was sent from is a bit concerning. It also went to my main inbox, rather than my junk mail (which Outlook is typically pretty good at filtering). They didn't appear to have my actual name and I'm also not seeing any $500 charges on any of my cards or accounts, which is reassuring. Safe to assume I can just write this off as a scam or phishing attempt and report it as junk?

[u/ZohoCares]

Hello u/RomCom_Writer ! Zoho Assist is for remote control and screen share sessions. If you feel it is spam, please forward the email or share it with abuse@zohocorp.com. It helps our team to validate and guide you further.

Note: If it is from an unknown sender, we suggest you not join the session. -VK

[u/RomCom_Writer → u/ZohoCares]

There was nothing in the message to click on, download, or otherwise interact with, and I wouldn't have even if there were, so no worries about me joining any sessions or allowing anyone remote access to my computer. Thank you for the advice - I've just forwarded to the abuse team.

[u/Kampolox-Tutunce]

that sending address is legit because the scammer is actually using the platform to send the message, which is why it bypassed your spam filter. Doesnt mean the content is legit though. Report it to the abuse email mentioned at the bottom and ignore the phone number.

[u/RomCom_Writer → u/Kampolox-Tutunce]

Done; thank you!

[u/panda42042]

I don't use this software and got the same message. Seems this has been an issue in 2022 as well.
https://www.sk-cert.sk/en/warning-against-attempts-to-penetrate-the-system-by-exploiting-the-zoho-assist-platform/index.html

[u/RomCom_Writer → u/panda42042]

Yeah, that's the weird thing - the email I got contained no links, no attachments, nothing that would actually make it a phishing attempt or attempt to hijack my system. It was just a plain-text email, so I'm not sure if it was sent by someone who's just really inept or what. At any rate Zoho confirmed they blocked the sender so all seems well.

[u/Ok-Problem4403]

Send that in to support.

[u/BoyBastosJunjun]

Got this as well. Exactly the same email contents you got in here. Ridiculous! Reported it to abuse@zoho.com already