Both people who replied had an email domain at a specific business. Apart from that, I have no idea. What you said is probably right.
"Please to be doing the needful and refunding your money now, valued customer. For security purposes please confirm your bank account and routing number. Sincerely, Microsoft" 😂