Microsoft and My Tinfoil Journey (opens in new tab)

Recurring charges often use some arrangement with the payment processor that doesn't actually use the literal card number after the first authorization. There's a bunch of contributing reasons but the obvious ones are security (no storing card numbers) and to make things easier for both companies and individuals when replacing cards, since most outright fraud is one-off charges.

Perhaps these are just Azure Front Door IP addresses? I don't have another site I can check, but it's possible that these IP addresses are used by lots of websites as part of the Azure infrastructure stack.

Just came here to say this. Once they pasted in the merchant info from their statement I thought - this has nothing to do with the publicly traded company and everything to do with fraud.