Once, I found out that my place of work was paying some random guy hundreds of dollars to use his Outlook plugin because his forum posts gave them the impression he was a Microsoft employee. It was 3 years before IT caught it and made it stop.