diff --git a/api/config/config_local.json b/api/config/config_local.json
index c56aceecfa6..ccb5f96d80d 100644
--- a/api/config/config_local.json
+++ b/api/config/config_local.json
@@ -150,7 +150,8 @@
   "offlineBatch": {
     "unsafeCloudTasksForwardingHost": "http:\/\/localhost:8081",
     "usersPerAuditTask": 20,
-    "usersPerSynchronizeAccessTask": 50
+    "usersPerSynchronizeAccessTask": 50,
+    "usersPerCheckInitialCreditsExpirationTask": 50
   },
   "egressAlertRemediationPolicy": {
     "enableJiraTicketing": false,
diff --git a/api/config/config_preprod.json b/api/config/config_preprod.json
index 6e721d4e8d6..a5c85389af8 100644
--- a/api/config/config_preprod.json
+++ b/api/config/config_preprod.json
@@ -145,7 +145,8 @@
   },
   "offlineBatch": {
     "usersPerAuditTask": 20,
-    "usersPerSynchronizeAccessTask": 50
+    "usersPerSynchronizeAccessTask": 50,
+    "usersPerCheckInitialCreditsExpirationTask": 50
   },
   "termsOfService": {
     "latestAouVersion": 1
diff --git a/api/config/config_prod.json b/api/config/config_prod.json
index bc750b58f26..e8c2db43f54 100644
--- a/api/config/config_prod.json
+++ b/api/config/config_prod.json
@@ -151,7 +151,8 @@
   },
   "offlineBatch": {
     "usersPerAuditTask": 20,
-    "usersPerSynchronizeAccessTask": 50
+    "usersPerSynchronizeAccessTask": 50,
+    "usersPerCheckInitialCreditsExpirationTask": 50
   },
   "egressAlertRemediationPolicy": {
     "enableJiraTicketing": true,
diff --git a/api/config/config_stable.json b/api/config/config_stable.json
index 1de3ff1b985..a5f8027949c 100644
--- a/api/config/config_stable.json
+++ b/api/config/config_stable.json
@@ -149,7 +149,8 @@
   },
   "offlineBatch": {
     "usersPerAuditTask": 20,
-    "usersPerSynchronizeAccessTask": 50
+    "usersPerSynchronizeAccessTask": 50,
+    "usersPerCheckInitialCreditsExpirationTask": 50
   },
   "egressAlertRemediationPolicy": {
     "enableJiraTicketing": false,
diff --git a/api/config/config_staging.json b/api/config/config_staging.json
index 2dad2fa9ae2..21a6669453a 100644
--- a/api/config/config_staging.json
+++ b/api/config/config_staging.json
@@ -146,7 +146,8 @@
   },
   "offlineBatch": {
     "usersPerAuditTask": 20,
-    "usersPerSynchronizeAccessTask": 50
+    "usersPerSynchronizeAccessTask": 50,
+    "usersPerCheckInitialCreditsExpirationTask": 50
   },
   "egressAlertRemediationPolicy": {
     "enableJiraTicketing": false,
diff --git a/api/config/config_test.json b/api/config/config_test.json
index 61baf8ca4a6..54c78c55e9d 100644
--- a/api/config/config_test.json
+++ b/api/config/config_test.json
@@ -151,7 +151,8 @@
   },
   "offlineBatch": {
     "usersPerAuditTask": 20,
-    "usersPerSynchronizeAccessTask": 50
+    "usersPerSynchronizeAccessTask": 50,
+    "usersPerCheckInitialCreditsExpirationTask": 50
   },
   "egressAlertRemediationPolicy": {
     "enableJiraTicketing": false,
diff --git a/api/db/changelog/db.changelog-233-add-user-initial-credit-expiration-notification-column.xml b/api/db/changelog/db.changelog-233-add-user-initial-credit-expiration-notification-column.xml
new file mode 100644
index 00000000000..2853ca9566b
--- /dev/null
+++ b/api/db/changelog/db.changelog-233-add-user-initial-credit-expiration-notification-column.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<databaseChangeLog
+  xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
+                      http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.1.xsd">
+  <changeSet author="evrii" id="changelog-232-add-user_initial_credits_expiration">
+    <addColumn tableName="user_initial_credits_expiration">
+      <column name="notification_status" type="ENUM('NO_NOTIFICATION_SENT','EXPIRATION_NOTIFICATION_SENT')" defaultValue="NO_NOTIFICATION_SENT">
+        <constraints nullable="false"/>
+      </column>
+    </addColumn>
+
+  </changeSet>
+</databaseChangeLog>
diff --git a/api/db/changelog/db.changelog-master.xml b/api/db/changelog/db.changelog-master.xml
index bd5cebfef34..d9702997ddd 100644
--- a/api/db/changelog/db.changelog-master.xml
+++ b/api/db/changelog/db.changelog-master.xml
@@ -240,6 +240,7 @@
   <include file="changelog/db.changelog-230-create-featured-workspace-table.xml"/>
   <include file="changelog/db.changelog-231-drop-featured-workspace-description-col.xml"/>
   <include file="changelog/db.changelog-232-add-user_initial_credits_expiration.xml"/>
+  <include file="changelog/db.changelog-233-add-user-initial-credit-expiration-notification-column.xml"/>
   <!--
    Note: to update the DB locally, do the following:
    - Migrate schema changes: `./project.rb run-local-all-migrations`
diff --git a/api/src/main/java/org/pmiops/workbench/api/CloudTaskUserController.java b/api/src/main/java/org/pmiops/workbench/api/CloudTaskUserController.java
index d8ec3781f42..c82c2a24198 100644
--- a/api/src/main/java/org/pmiops/workbench/api/CloudTaskUserController.java
+++ b/api/src/main/java/org/pmiops/workbench/api/CloudTaskUserController.java
@@ -17,6 +17,7 @@
 import org.pmiops.workbench.db.model.DbUser;
 import org.pmiops.workbench.exceptions.WorkbenchException;
 import org.pmiops.workbench.google.CloudResourceManagerService;
+import org.pmiops.workbench.initialcredits.InitialCreditsExpirationService;
 import org.pmiops.workbench.model.AccessModuleStatus;
 import org.pmiops.workbench.model.AuditProjectAccessRequest;
 import org.pmiops.workbench.model.SynchronizeUserAccessRequest;
@@ -55,18 +56,21 @@ public class CloudTaskUserController implements CloudTaskUserApiDelegate {
   private final UserService userService;
   private final AccessModuleService accessModuleService;
   private final FreeTierBillingBatchUpdateService freeTierBillingUpdateService;
+  private final InitialCreditsExpirationService initialCreditsExpirationService;
 
   CloudTaskUserController(
       UserDao userDao,
       CloudResourceManagerService cloudResourceManagerService,
       UserService userService,
       AccessModuleService accessModuleService,
-      FreeTierBillingBatchUpdateService freeTierBillingUpdateService) {
+      FreeTierBillingBatchUpdateService freeTierBillingUpdateService,
+      InitialCreditsExpirationService initialCreditsExpirationService) {
     this.userDao = userDao;
     this.cloudResourceManagerService = cloudResourceManagerService;
     this.userService = userService;
     this.accessModuleService = accessModuleService;
     this.freeTierBillingUpdateService = freeTierBillingUpdateService;
+    this.initialCreditsExpirationService = initialCreditsExpirationService;
   }
 
   @Override
@@ -173,6 +177,18 @@ public ResponseEntity<Void> synchronizeUserAccess(SynchronizeUserAccessRequest r
     return ResponseEntity.noContent().build();
   }
 
+  /**
+   * Takes in batch of user Ids check whether users have initial credits that have expired
+   *
+   * @param body : Batch of user IDs from cloud task queue: checkCreditsExpirationForUserIDsQueue
+   * @return
+   */
+  @Override
+  public ResponseEntity<Void> checkCreditsExpirationForUserIDs(List<Long> userIdsList) {
+    initialCreditsExpirationService.checkCreditsExpirationForUserIDs(userIdsList);
+    return ResponseEntity.noContent().build();
+  }
+
   // v1 cloudresourcemanager project.getParent() returned a ResourceId with type and id fields
   // v3 returns a string instead, in the format type/id
 
diff --git a/api/src/main/java/org/pmiops/workbench/api/OfflineUserController.java b/api/src/main/java/org/pmiops/workbench/api/OfflineUserController.java
index 0acf846d33f..0924e366b1c 100644
--- a/api/src/main/java/org/pmiops/workbench/api/OfflineUserController.java
+++ b/api/src/main/java/org/pmiops/workbench/api/OfflineUserController.java
@@ -40,4 +40,9 @@ public ResponseEntity<Void> sendAccessExpirationEmails() {
     userService.getAllUsers().forEach(userService::maybeSendAccessTierExpirationEmails);
     return ResponseEntity.noContent().build();
   }
+
+  public ResponseEntity<Void> checkInitialCreditsExpiration() {
+    taskQueueService.groupAndPushCheckInitialCreditExpirationTasks(userService.getAllUserIds());
+    return ResponseEntity.noContent().build();
+  }
 }
diff --git a/api/src/main/java/org/pmiops/workbench/billing/FreeTierBillingService.java b/api/src/main/java/org/pmiops/workbench/billing/FreeTierBillingService.java
index 689859b92c6..c2244867394 100644
--- a/api/src/main/java/org/pmiops/workbench/billing/FreeTierBillingService.java
+++ b/api/src/main/java/org/pmiops/workbench/billing/FreeTierBillingService.java
@@ -8,8 +8,13 @@
 import java.sql.Timestamp;
 import java.time.Duration;
 import java.time.LocalDateTime;
-import java.util.*;
+import java.util.Collections;
+import java.util.Comparator;
+import java.util.List;
+import java.util.Map;
 import java.util.Map.Entry;
+import java.util.Optional;
+import java.util.Set;
 import java.util.stream.Collectors;
 import org.pmiops.workbench.actionaudit.auditors.UserServiceAuditor;
 import org.pmiops.workbench.cloudtasks.TaskQueueService;
@@ -20,6 +25,7 @@
 import org.pmiops.workbench.db.model.DbUser;
 import org.pmiops.workbench.db.model.DbWorkspace;
 import org.pmiops.workbench.db.model.DbWorkspaceFreeTierUsage;
+import org.pmiops.workbench.initialcredits.InitialCreditsExpirationService;
 import org.pmiops.workbench.model.BillingStatus;
 import org.pmiops.workbench.utils.CostComparisonUtils;
 import org.pmiops.workbench.workspaces.WorkspaceUtils;
@@ -39,6 +45,7 @@ public class FreeTierBillingService {
   private final WorkspaceDao workspaceDao;
   private final WorkspaceFreeTierUsageDao workspaceFreeTierUsageDao;
   private final WorkspaceFreeTierUsageService workspaceFreeTierUsageService;
+  private final InitialCreditsExpirationService initialCreditsExpirationService;
 
   private static final Logger logger = LoggerFactory.getLogger(FreeTierBillingService.class);
 
@@ -50,7 +57,8 @@ public FreeTierBillingService(
       UserServiceAuditor userServiceAuditor,
       WorkspaceDao workspaceDao,
       WorkspaceFreeTierUsageDao workspaceFreeTierUsageDao,
-      WorkspaceFreeTierUsageService workspaceFreeTierUsageService) {
+      WorkspaceFreeTierUsageService workspaceFreeTierUsageService,
+      InitialCreditsExpirationService initialCreditsExpirationService) {
     this.taskQueueService = taskQueueService;
     this.userDao = userDao;
     this.workbenchConfigProvider = workbenchConfigProvider;
@@ -58,6 +66,7 @@ public FreeTierBillingService(
     this.workspaceDao = workspaceDao;
     this.workspaceFreeTierUsageDao = workspaceFreeTierUsageDao;
     this.workspaceFreeTierUsageService = workspaceFreeTierUsageService;
+    this.initialCreditsExpirationService = initialCreditsExpirationService;
   }
 
   public double getWorkspaceFreeTierBillingUsage(DbWorkspace dbWorkspace) {
@@ -193,9 +202,11 @@ public double getUserFreeTierDollarLimit(DbUser user) {
   public boolean maybeSetDollarLimitOverride(DbUser user, double newDollarLimit) {
     final Double previousLimitMaybe = user.getFreeTierCreditsLimitDollarsOverride();
 
-    if (previousLimitMaybe != null
-        || CostComparisonUtils.costsDiffer(
-            newDollarLimit, workbenchConfigProvider.get().billing.defaultFreeCreditsDollarLimit)) {
+    if (!initialCreditsExpirationService.haveCreditsExpired(user)
+        && (previousLimitMaybe != null
+            || CostComparisonUtils.costsDiffer(
+                newDollarLimit,
+                workbenchConfigProvider.get().billing.defaultFreeCreditsDollarLimit))) {
 
       // TODO: prevent setting this limit directly except in this method?
       user.setFreeTierCreditsLimitDollarsOverride(newDollarLimit);
diff --git a/api/src/main/java/org/pmiops/workbench/cloudtasks/TaskQueueService.java b/api/src/main/java/org/pmiops/workbench/cloudtasks/TaskQueueService.java
index 8561e44dfe7..557983b578f 100644
--- a/api/src/main/java/org/pmiops/workbench/cloudtasks/TaskQueueService.java
+++ b/api/src/main/java/org/pmiops/workbench/cloudtasks/TaskQueueService.java
@@ -44,7 +44,8 @@ public class TaskQueueService {
   private static final String DELETE_TEST_WORKSPACES_PATH = BASE_PATH + "/deleteTestUserWorkspaces";
   private static final String DELETE_RAWLS_TEST_WORKSPACES_PATH =
       BASE_PATH + "/deleteTestUserWorkspacesInRawls";
-
+  private static final String CHECK_CREDITS_EXPIRATION_FOR_USER_IDS_PATH =
+      BASE_PATH + "/checkCreditsExpirationForUserIDs";
   private static final String CHECK_AND_ALERT_FREE_TIER_USAGE =
       BASE_PATH + "/checkAndAlertFreeTierBillingUsage";
 
@@ -58,16 +59,17 @@ public class TaskQueueService {
   private static final String DELETE_TEST_WORKSPACES_QUEUE_NAME = "deleteTestUserWorkspacesQueue";
   private static final String DELETE_RAWLS_TEST_WORKSPACES_QUEUE_NAME =
       "deleteTestUserRawlsWorkspacesQueue";
-
   private static final String FREE_TIER_BILLING_QUEUE = "freeTierBillingQueue";
-
   private static final String EXPIRED_FREE_CREDITS_QUEUE_NAME = "expiredFreeCreditsQueue";
+  private static final String CHECK_CREDITS_EXPIRATION_FOR_USER_IDS_QUEUE_NAME =
+      "checkCreditsExpirationForUserIDsQueue";
+
   private static final Logger LOGGER = Logger.getLogger(TaskQueueService.class.getName());
 
-  private WorkbenchLocationConfigService locationConfigService;
-  private Provider<CloudTasksClient> cloudTasksClientProvider;
-  private Provider<WorkbenchConfig> workbenchConfigProvider;
-  private Provider<UserAuthentication> userAuthenticationProvider;
+  private final WorkbenchLocationConfigService locationConfigService;
+  private final Provider<CloudTasksClient> cloudTasksClientProvider;
+  private final Provider<WorkbenchConfig> workbenchConfigProvider;
+  private final Provider<UserAuthentication> userAuthenticationProvider;
 
   public TaskQueueService(
       WorkbenchLocationConfigService locationConfigService,
@@ -219,6 +221,18 @@ public void pushInitialCreditsExpiryTask(
             .liveCostByCreator(liveCostByCreator));
   }
 
+  public void groupAndPushCheckInitialCreditExpirationTasks(List<Long> userIds) {
+    WorkbenchConfig workbenchConfig = workbenchConfigProvider.get();
+    CloudTasksUtils.partitionList(
+            userIds, workbenchConfig.offlineBatch.usersPerCheckInitialCreditsExpirationTask)
+        .forEach(
+            batch ->
+                createAndPushTask(
+                    CHECK_CREDITS_EXPIRATION_FOR_USER_IDS_QUEUE_NAME,
+                    CHECK_CREDITS_EXPIRATION_FOR_USER_IDS_PATH,
+                    batch));
+  }
+
   private String createAndPushTask(String queueName, String taskUri, Object jsonBody) {
     return createAndPushTask(queueName, taskUri, jsonBody, ImmutableMap.of());
   }
diff --git a/api/src/main/java/org/pmiops/workbench/config/WorkbenchConfig.java b/api/src/main/java/org/pmiops/workbench/config/WorkbenchConfig.java
index bf8d25d0dce..10ed7c9d9f4 100644
--- a/api/src/main/java/org/pmiops/workbench/config/WorkbenchConfig.java
+++ b/api/src/main/java/org/pmiops/workbench/config/WorkbenchConfig.java
@@ -400,6 +400,8 @@ public static class OfflineBatchConfig {
     public Integer usersPerAuditTask;
     // Number of users to process within a single access synchronization task.
     public Integer usersPerSynchronizeAccessTask;
+    // Number of users to process within a single check initial credits expiration task.
+    public Integer usersPerCheckInitialCreditsExpirationTask;
   }
 
   /**
diff --git a/api/src/main/java/org/pmiops/workbench/db/model/DbUserInitialCreditsExpiration.java b/api/src/main/java/org/pmiops/workbench/db/model/DbUserInitialCreditsExpiration.java
index a235113dcb2..d975799fcfb 100644
--- a/api/src/main/java/org/pmiops/workbench/db/model/DbUserInitialCreditsExpiration.java
+++ b/api/src/main/java/org/pmiops/workbench/db/model/DbUserInitialCreditsExpiration.java
@@ -20,6 +20,7 @@ public class DbUserInitialCreditsExpiration {
   private Timestamp expirationTime;
   private boolean bypassed;
   private int extensionCount;
+  private NotificationStatus notificationStatus;
 
   @Id
   @GeneratedValue(strategy = GenerationType.IDENTITY)
@@ -83,4 +84,20 @@ public DbUserInitialCreditsExpiration setExtensionCount(int extensionCount) {
     this.extensionCount = extensionCount;
     return this;
   }
+
+  @Column(name = "notification_status")
+  public NotificationStatus getNotificationStatus() {
+    return notificationStatus;
+  }
+
+  public DbUserInitialCreditsExpiration setNotificationStatus(
+      NotificationStatus notificationStatus) {
+    this.notificationStatus = notificationStatus;
+    return this;
+  }
+
+  public enum NotificationStatus {
+    NO_NOTIFICATION_SENT,
+    EXPIRATION_NOTIFICATION_SENT
+  }
 }
diff --git a/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationService.java b/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationService.java
index 02737e09597..4afd01bd23f 100644
--- a/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationService.java
+++ b/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationService.java
@@ -1,9 +1,14 @@
 package org.pmiops.workbench.initialcredits;
 
 import java.sql.Timestamp;
+import java.util.List;
 import java.util.Optional;
 import org.pmiops.workbench.db.model.DbUser;
 
 public interface InitialCreditsExpirationService {
   Optional<Timestamp> getCreditsExpiration(DbUser user);
+
+  void checkCreditsExpirationForUserIDs(List<Long> userIdsList);
+
+  boolean haveCreditsExpired(DbUser user);
 }
diff --git a/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceImpl.java b/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceImpl.java
index d00ce8fb46c..51f12ac9d0f 100644
--- a/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceImpl.java
+++ b/api/src/main/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceImpl.java
@@ -1,14 +1,63 @@
 package org.pmiops.workbench.initialcredits;
 
+import jakarta.inject.Provider;
+import jakarta.mail.MessagingException;
 import java.sql.Timestamp;
+import java.time.Clock;
+import java.util.List;
 import java.util.Optional;
+import org.pmiops.workbench.config.WorkbenchConfig;
+import org.pmiops.workbench.db.dao.UserDao;
+import org.pmiops.workbench.db.dao.WorkspaceDao;
 import org.pmiops.workbench.db.model.DbUser;
 import org.pmiops.workbench.db.model.DbUserInitialCreditsExpiration;
+import org.pmiops.workbench.db.model.DbUserInitialCreditsExpiration.NotificationStatus;
+import org.pmiops.workbench.db.model.DbWorkspace;
+import org.pmiops.workbench.exceptions.WorkbenchException;
+import org.pmiops.workbench.leonardo.LeonardoApiClient;
+import org.pmiops.workbench.mail.MailService;
+import org.pmiops.workbench.model.BillingStatus;
+import org.pmiops.workbench.workspaces.WorkspaceUtils;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
 @Service
 public class InitialCreditsExpirationServiceImpl implements InitialCreditsExpirationService {
 
+  private static final org.slf4j.Logger logger =
+      LoggerFactory.getLogger(InitialCreditsExpirationServiceImpl.class);
+  private final UserDao userDao;
+  private final MailService mailService;
+  private final Clock clock;
+  private final WorkspaceDao workspaceDao;
+  private final Provider<WorkbenchConfig> workbenchConfigProvider;
+  private final LeonardoApiClient leonardoApiClient;
+
+  @Autowired
+  public InitialCreditsExpirationServiceImpl(
+      UserDao userDao,
+      MailService mailService,
+      WorkspaceDao workspaceDao,
+      Clock clock,
+      Provider<WorkbenchConfig> workbenchConfigProvider,
+      LeonardoApiClient leonardoApiClient) {
+    this.userDao = userDao;
+    this.mailService = mailService;
+    this.clock = clock;
+    this.workspaceDao = workspaceDao;
+    this.workbenchConfigProvider = workbenchConfigProvider;
+    this.leonardoApiClient = leonardoApiClient;
+  }
+
+  @Override
+  public void checkCreditsExpirationForUserIDs(List<Long> userIdsList) {
+    if (userIdsList != null && !userIdsList.isEmpty()) {
+      Iterable<DbUser> users = userDao.findAllById(userIdsList);
+      users.forEach(this::checkExpiration);
+    }
+  }
+
   @Override
   public Optional<Timestamp> getCreditsExpiration(DbUser user) {
     return Optional.ofNullable(user.getUserInitialCreditsExpiration())
@@ -17,4 +66,61 @@ public Optional<Timestamp> getCreditsExpiration(DbUser user) {
         // .filter(() -> institutionService.shouldBypassForCreditsExpiration(user))
         .map(DbUserInitialCreditsExpiration::getExpirationTime);
   }
+
+  @Override
+  public boolean haveCreditsExpired(DbUser user) {
+    return getCreditsExpiration(user)
+        .map(expirationTime -> !expirationTime.after(new Timestamp(clock.instant().toEpochMilli())))
+        .orElse(false);
+  }
+
+  private void checkExpiration(DbUser user) {
+    DbUserInitialCreditsExpiration userInitialCreditsExpiration =
+        user.getUserInitialCreditsExpiration();
+    if (null != userInitialCreditsExpiration
+        && haveCreditsExpired(user)
+        && userInitialCreditsExpiration
+            .getNotificationStatus()
+            .equals(NotificationStatus.NO_NOTIFICATION_SENT)) {
+      logger.info(
+          "Initial credits expired for user {}. Expiration time: {}",
+          user.getUsername(),
+          userInitialCreditsExpiration.getExpirationTime());
+      workspaceDao.findAllByCreator(user).stream()
+          .filter(
+              ws ->
+                  WorkspaceUtils.isFreeTier(
+                      ws.getBillingAccountName(), workbenchConfigProvider.get()))
+          .filter(DbWorkspace::isActive)
+          .filter(ws -> ws.getBillingStatus().equals(BillingStatus.ACTIVE))
+          .forEach(
+              ws -> {
+                workspaceDao.updateBillingStatus(ws.getWorkspaceId(), BillingStatus.INACTIVE);
+                deleteAppsAndRuntimesInWorkspace(ws);
+              });
+      try {
+        mailService.alertUserInitialCreditsExpired(user);
+        userInitialCreditsExpiration.setNotificationStatus(
+            NotificationStatus.EXPIRATION_NOTIFICATION_SENT);
+        userDao.save(user);
+
+      } catch (MessagingException e) {
+        logger.error(
+            String.format(
+                "Failed to send initial credits expiration notification for user %s",
+                user.getUserId()));
+      }
+    }
+  }
+
+  private void deleteAppsAndRuntimesInWorkspace(DbWorkspace workspace) {
+
+    String namespace = workspace.getWorkspaceNamespace();
+    try {
+      leonardoApiClient.deleteAllResources(workspace.getGoogleProject(), false);
+      logger.info("Deleted apps and runtimes for workspace {}", namespace);
+    } catch (WorkbenchException e) {
+      logger.error("Failed to delete apps and runtimes for workspace {}", namespace, e);
+    }
+  }
 }
diff --git a/api/src/main/java/org/pmiops/workbench/mail/MailService.java b/api/src/main/java/org/pmiops/workbench/mail/MailService.java
index bc32ba22558..864d04dc589 100644
--- a/api/src/main/java/org/pmiops/workbench/mail/MailService.java
+++ b/api/src/main/java/org/pmiops/workbench/mail/MailService.java
@@ -30,6 +30,8 @@ void alertUserInitialCreditsDollarThreshold(
 
   void alertUserInitialCreditsExhausted(final DbUser user) throws MessagingException;
 
+  void alertUserInitialCreditsExpired(final DbUser user) throws MessagingException;
+
   void alertUserAccessTierWarningThreshold(
       final DbUser user, long daysRemaining, Instant expirationTime, String tierShortName)
       throws MessagingException;
diff --git a/api/src/main/java/org/pmiops/workbench/mail/MailServiceImpl.java b/api/src/main/java/org/pmiops/workbench/mail/MailServiceImpl.java
index 17e704a5084..472e504b449 100644
--- a/api/src/main/java/org/pmiops/workbench/mail/MailServiceImpl.java
+++ b/api/src/main/java/org/pmiops/workbench/mail/MailServiceImpl.java
@@ -81,6 +81,8 @@ public class MailServiceImpl implements MailService {
       "emails/initial_credits_dollar_threshold/content.html";
   private static final String INITIAL_CREDITS_EXHAUSTION_RESOURCE =
       "emails/initial_credits_exhaustion/content.html";
+  private static final String INITIAL_CREDITS_EXPIRED_RESOURCE =
+      "emails/initial_credits_expired/content.html";
   private static final String INSTRUCTIONS_RESOURCE = "emails/instructions/content.html";
   private static final String NEW_USER_SATISFACTION_SURVEY_RESOURCE =
       "emails/new_user_satisfaction_survey/content.html";
@@ -230,6 +232,24 @@ public void alertUserInitialCreditsExhausted(final DbUser user) throws Messaging
         htmlMessage);
   }
 
+  @Override
+  public void alertUserInitialCreditsExpired(final DbUser user) throws MessagingException {
+    final String logMsg =
+        String.format(
+            "Sending email because initial credits have expired for User %s", userForLogging(user));
+    log.info(logMsg);
+
+    final String htmlMessage =
+        buildHtml(INITIAL_CREDITS_EXPIRED_RESOURCE, initialCreditsExpirationSubstitutionMap(user));
+
+    sendWithRetries(
+        Collections.singletonList(user.getContactEmail()),
+        Collections.emptyList(),
+        "Alert - Initial credit expiration in All of Us Researcher Workbench",
+        logMsg,
+        htmlMessage);
+  }
+
   @Override
   public void alertUserAccessTierWarningThreshold(
       final DbUser user, long daysRemaining, Instant expirationTime, String tierShortName)
@@ -587,6 +607,18 @@ private ImmutableMap<EmailSubstitutionField, String> initialCreditsExhaustionSub
         .build();
   }
 
+  private ImmutableMap<EmailSubstitutionField, String> initialCreditsExpirationSubstitutionMap(
+      DbUser user) {
+
+    return new ImmutableMap.Builder<EmailSubstitutionField, String>()
+        .put(EmailSubstitutionField.HEADER_IMG, getAllOfUsLogo())
+        .put(EmailSubstitutionField.FIRST_NAME, user.getGivenName())
+        .put(EmailSubstitutionField.LAST_NAME, user.getFamilyName())
+        .put(EmailSubstitutionField.USERNAME, user.getUsername())
+        .put(EmailSubstitutionField.INITIAL_CREDITS_RESOLUTION, getInitialCreditsResolutionText())
+        .build();
+  }
+
   private ImmutableMap<EmailSubstitutionField, String> accessTierSubstitutionMap(
       Instant expirationTime, DbUser user, String tierShortName) {
 
diff --git a/api/src/main/resources/emails/initial_credits_exhaustion/content.html b/api/src/main/resources/emails/initial_credits_expired/content.html
similarity index 92%
rename from api/src/main/resources/emails/initial_credits_exhaustion/content.html
rename to api/src/main/resources/emails/initial_credits_expired/content.html
index b72415784a6..d7294703d7b 100644
--- a/api/src/main/resources/emails/initial_credits_exhaustion/content.html
+++ b/api/src/main/resources/emails/initial_credits_expired/content.html
@@ -29,7 +29,7 @@
 <body>
 <img src="${HEADER_IMG}">
 <div>Hello ${FIRST_NAME} ${LAST_NAME},</div>
-<div>This is a notification that the initial credits offered to your account ${USERNAME} by the All of Us Program have all been used.</div>
+<div>This is a notification that the initial credits offered to your account ${USERNAME} by the All of Us Program have expired.</div>
 <div>You ${INITIAL_CREDITS_RESOLUTION}</div>
 <div>If you have any questions about this email, please contact support@researchallofus.org.</div>
 <div>Thanks for using the Researcher Workbench.</div>
diff --git a/api/src/main/resources/workbench-api.yaml b/api/src/main/resources/workbench-api.yaml
index be0aa0f4112..e4d826cbfcc 100644
--- a/api/src/main/resources/workbench-api.yaml
+++ b/api/src/main/resources/workbench-api.yaml
@@ -2766,6 +2766,24 @@ paths:
         204:
           description: No content.
           content: {}
+  /v1/cron/checkInitialCreditsExpiration:
+    get:
+      tags:
+      - offlineUser
+      - cron
+      description: Updates users if their initial credits have recently expired
+      operationId: checkInitialCreditsExpiration
+      security: []
+      responses:
+        204:
+          description: No content.
+          content: {}
+        500:
+          description: Internal Error
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
   /v1/workspaces/{workspaceNamespace}/{terraName}/notebooks/{notebookName}/readonly:
     post:
       tags:
@@ -4475,7 +4493,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/UseridList'
+              $ref: '#/components/schemas/UserIdList'
         required: true
       responses:
         200:
@@ -4503,6 +4521,27 @@ paths:
           description: Handle Free Credits Expiry Task Ran Successfully
           content: { }
       x-codegen-request-body-name: request
+  /v1/cloudTask/checkCreditsExpirationForUserIDs:
+    post:
+      tags:
+      - cloudTaskUser
+      - cloudTask
+      description: |
+        Run the business logic to handle users whose free credits have expired. Including disabling compute, deleting cloud environments, and sending them notifications.
+      operationId: checkCreditsExpirationForUserIDs
+      security: [ ]
+      requestBody:
+        description: Users that should be alerted about their free credits use.
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/UserIdList'
+        required: true
+      responses:
+        200:
+          description: Check Credits Expiration For User IDs Task Ran Successfully
+          content: { }
+      x-codegen-request-body-name: request
   /v1/institutions:
     get:
       tags:
@@ -9952,6 +9991,17 @@ components:
           properties: { }
           description: |
             A map of the total live cost of the user's workspaces, indexed by the user's ID.
+    CheckCreditsExpirationForUserIDsRequest:
+      required:
+      - userIds
+      type: object
+      properties:
+        userIds:
+          type: array
+          description: List of User IDs to check for initial free credits expiration
+          items:
+            type: integer
+            format: int64
     WorkspaceAdminView:
       type: object
       properties:
@@ -11747,7 +11797,7 @@ components:
           items:
             type: integer
             format: int64
-    UseridList:
+    UserIdList:
       type: array
       items:
         type: integer
@@ -13165,6 +13215,12 @@ components:
       - NEUTRAL
       - SATISFIED
       - VERY_SATISFIED
+    InitialCreditExpirationNotificationStatus:
+      type: string
+      description: Describes whether or not a user has been sent a notification about their initial credits expiring.
+      enum:
+      - NO_NOTIFICATION_SENT
+      - EXPIRATION_NOTIFICATION_SENT
   parameters:
     userId:
       name: userId
diff --git a/api/src/main/webapp/WEB-INF/cron_base.yaml b/api/src/main/webapp/WEB-INF/cron_base.yaml
index a20057f2793..2b559397e1a 100644
--- a/api/src/main/webapp/WEB-INF/cron_base.yaml
+++ b/api/src/main/webapp/WEB-INF/cron_base.yaml
@@ -80,4 +80,3 @@ cron:
   schedule: every day 21:00
   timezone: America/Chicago
   target: api
-
diff --git a/api/src/main/webapp/WEB-INF/cron_test.yaml b/api/src/main/webapp/WEB-INF/cron_test.yaml
index 1ad45b32942..d4e36938126 100644
--- a/api/src/main/webapp/WEB-INF/cron_test.yaml
+++ b/api/src/main/webapp/WEB-INF/cron_test.yaml
@@ -3,5 +3,10 @@ cron:
   schedule: every 24 hours
 - url: /v1/cron/checkFreeTierBillingUsage
   schedule: every 24 hours
+- description: Find and alert users whose initial credits have expired using cloud task
+  url: /v1/cron/checkInitialCreditsExpiration
+  schedule: every 24 hours
+  timezone: UTC
+  target: api
 
 
diff --git a/api/src/test/java/org/pmiops/workbench/api/CloudTaskUserControllerTest.java b/api/src/test/java/org/pmiops/workbench/api/CloudTaskUserControllerTest.java
index f55eddb53c4..13948475348 100644
--- a/api/src/test/java/org/pmiops/workbench/api/CloudTaskUserControllerTest.java
+++ b/api/src/test/java/org/pmiops/workbench/api/CloudTaskUserControllerTest.java
@@ -25,6 +25,7 @@
 import org.pmiops.workbench.db.model.DbAccessModule.DbAccessModuleName;
 import org.pmiops.workbench.db.model.DbUser;
 import org.pmiops.workbench.google.CloudResourceManagerService;
+import org.pmiops.workbench.initialcredits.InitialCreditsExpirationService;
 import org.pmiops.workbench.model.AccessModuleStatus;
 import org.pmiops.workbench.model.AuditProjectAccessRequest;
 import org.pmiops.workbench.model.SynchronizeUserAccessRequest;
@@ -52,6 +53,8 @@ public class CloudTaskUserControllerTest {
 
   @Autowired private FreeTierBillingBatchUpdateService mockFreeTierBillingUpdateService;
 
+  @Autowired private InitialCreditsExpirationService mockInitialCreditsExpirationService;
+
   @TestConfiguration
   @Import({FakeClockConfiguration.class, CloudTaskUserController.class})
   @MockBean({
@@ -59,6 +62,7 @@ public class CloudTaskUserControllerTest {
     CloudResourceManagerService.class,
     FreeTierBillingBatchUpdateService.class,
     UserService.class,
+    InitialCreditsExpirationService.class
   })
   static class Configuration {}
 
@@ -120,7 +124,7 @@ public void testSynchronizeAccess() {
 
   @Test
   public void testCheckAndAlertFreeTierBillingUsage() {
-    List<Long> userIdList = new ArrayList<Long>(Arrays.asList(1L, 2L, 3L));
+    List<Long> userIdList = new ArrayList<>(Arrays.asList(1L, 2L, 3L));
     controller.checkAndAlertFreeTierBillingUsage(userIdList);
     verify(mockFreeTierBillingUpdateService).checkAndAlertFreeTierBillingUsage(userIdList);
   }
@@ -131,4 +135,11 @@ public void testCheckAndAlertFreeTierBillingUsage_noUserListPassedFromTask() {
     controller.checkAndAlertFreeTierBillingUsage(userIdList);
     verify(mockFreeTierBillingUpdateService, never()).checkAndAlertFreeTierBillingUsage(userIdList);
   }
+
+  @Test
+  public void testCheckCreditsExpirationForUserIDs() {
+    List<Long> userIdList = new ArrayList<>(Arrays.asList(1L, 2L, 3L));
+    controller.checkCreditsExpirationForUserIDs(userIdList);
+    verify(mockInitialCreditsExpirationService).checkCreditsExpirationForUserIDs(userIdList);
+  }
 }
diff --git a/api/src/test/java/org/pmiops/workbench/api/OfflineUserControllerTest.java b/api/src/test/java/org/pmiops/workbench/api/OfflineUserControllerTest.java
index ddb883948ba..433f717ae2f 100644
--- a/api/src/test/java/org/pmiops/workbench/api/OfflineUserControllerTest.java
+++ b/api/src/test/java/org/pmiops/workbench/api/OfflineUserControllerTest.java
@@ -10,8 +10,9 @@
 
 import com.google.cloud.tasks.v2.CloudTasksClient;
 import com.google.cloud.tasks.v2.Task;
-import com.google.common.collect.ImmutableList;
 import com.google.gson.Gson;
+import com.google.gson.reflect.TypeToken;
+import java.lang.reflect.Type;
 import java.sql.Timestamp;
 import java.time.Instant;
 import java.util.Arrays;
@@ -41,6 +42,7 @@
 @DataJpaTest
 @DirtiesContext(classMode = DirtiesContext.ClassMode.BEFORE_EACH_TEST_METHOD)
 public class OfflineUserControllerTest {
+
   @Autowired private UserService mockUserService;
   @Autowired private OfflineUserController offlineUserController;
   @Autowired private CloudTasksClient mockCloudTasksClient;
@@ -58,6 +60,7 @@ public class OfflineUserControllerTest {
   })
   @MockBean({CloudTasksClient.class, UserService.class})
   static class Configuration {
+
     @Bean
     @Scope(ConfigurableBeanFactory.SCOPE_PROTOTYPE)
     WorkbenchConfig getWorkbenchConfig() {
@@ -79,6 +82,7 @@ public void setUp() {
     workbenchConfig = WorkbenchConfig.createEmptyConfig();
     workbenchConfig.server.projectId = "test";
     workbenchConfig.server.appEngineLocationId = "us-central";
+    workbenchConfig.offlineBatch.usersPerCheckInitialCreditsExpirationTask = 2;
     workbenchConfig.offlineBatch.usersPerAuditTask = 2;
     workbenchConfig.offlineBatch.usersPerSynchronizeAccessTask = 3;
   }
@@ -112,9 +116,9 @@ public void testGroupAndPushSynchronizeAccessTasks() {
 
     // We set a batch size of 3, so we expect two cloud tasks.
     List<SynchronizeUserAccessRequest> expectedRequests =
-        ImmutableList.of(
-            new SynchronizeUserAccessRequest().userIds(ImmutableList.of(1L, 2L, 3L)),
-            new SynchronizeUserAccessRequest().userIds(ImmutableList.of(4L)));
+        List.of(
+            new SynchronizeUserAccessRequest().userIds(List.of(1L, 2L, 3L)),
+            new SynchronizeUserAccessRequest().userIds(List.of(4L)));
     for (SynchronizeUserAccessRequest expected : expectedRequests) {
       verify(mockCloudTasksClient)
           .createTask(
@@ -137,9 +141,9 @@ public void testBulkAuditProjectAccess() {
 
     // Batch size is 2, so we expect 2 groups.
     List<AuditProjectAccessRequest> expectedRequests =
-        ImmutableList.of(
-            new AuditProjectAccessRequest().userIds(ImmutableList.of(1L, 2L)),
-            new AuditProjectAccessRequest().userIds(ImmutableList.of(3L, 4L)));
+        List.of(
+            new AuditProjectAccessRequest().userIds(List.of(1L, 2L)),
+            new AuditProjectAccessRequest().userIds(List.of(3L, 4L)));
     for (AuditProjectAccessRequest expected : expectedRequests) {
       verify(mockCloudTasksClient)
           .createTask(
@@ -156,4 +160,24 @@ private AuditProjectAccessRequest cloudTaskToAuditProjectAccessRequest(Task t) {
         .fromJson(
             t.getAppEngineHttpRequest().getBody().toStringUtf8(), AuditProjectAccessRequest.class);
   }
+
+  @Test
+  public void testCheckInitialCreditsExpiration() {
+    offlineUserController.checkInitialCreditsExpiration();
+
+    // Batch size is 2, so we expect 2 groups.
+    List<List<Long>> expectedRequests = List.of(List.of(1L, 2L), List.of(3L, 4L));
+    for (List<Long> expected : expectedRequests) {
+      verify(mockCloudTasksClient)
+          .createTask(
+              matches(Pattern.compile(".*/checkCreditsExpirationForUserIDsQueue$")),
+              argThat(taskRequest -> expected.equals(cloudTaskToUserIdList(taskRequest))));
+    }
+    verifyNoMoreInteractions(mockCloudTasksClient);
+  }
+
+  private List<Long> cloudTaskToUserIdList(Task t) {
+    Type listType = new TypeToken<List<Long>>() {}.getType();
+    return new Gson().fromJson(t.getAppEngineHttpRequest().getBody().toStringUtf8(), listType);
+  }
 }
diff --git a/api/src/test/java/org/pmiops/workbench/billing/FreeTierBillingServiceTest.java b/api/src/test/java/org/pmiops/workbench/billing/FreeTierBillingServiceTest.java
index d730abd6516..220cc8d5ec5 100644
--- a/api/src/test/java/org/pmiops/workbench/billing/FreeTierBillingServiceTest.java
+++ b/api/src/test/java/org/pmiops/workbench/billing/FreeTierBillingServiceTest.java
@@ -45,6 +45,7 @@
 import org.pmiops.workbench.db.model.DbUser;
 import org.pmiops.workbench.db.model.DbWorkspace;
 import org.pmiops.workbench.db.model.DbWorkspaceFreeTierUsage;
+import org.pmiops.workbench.initialcredits.InitialCreditsExpirationService;
 import org.pmiops.workbench.model.BillingStatus;
 import org.pmiops.workbench.model.WorkspaceActiveStatus;
 import org.pmiops.workbench.test.FakeClock;
@@ -67,6 +68,7 @@ public class FreeTierBillingServiceTest {
   private static final double DEFAULT_PERCENTAGE_TOLERANCE = 0.000001;
 
   @MockBean private UserServiceAuditor mockUserServiceAuditor;
+  @MockBean private InitialCreditsExpirationService initialCreditsExpirationService;
 
   @Autowired BigQueryService bigQueryService;
   @Autowired FreeTierBillingService freeTierBillingService;
diff --git a/api/src/test/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceTest.java b/api/src/test/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceTest.java
index f3052755941..c73685cfa4a 100644
--- a/api/src/test/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceTest.java
+++ b/api/src/test/java/org/pmiops/workbench/initialcredits/InitialCreditsExpirationServiceTest.java
@@ -1,26 +1,98 @@
 package org.pmiops.workbench.initialcredits;
 
-import static com.google.common.truth.Truth.assertThat;
 import static com.google.common.truth.Truth8.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.doThrow;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
 
+import jakarta.mail.MessagingException;
 import java.sql.Timestamp;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
 import org.pmiops.workbench.FakeClockConfiguration;
+import org.pmiops.workbench.config.WorkbenchConfig;
+import org.pmiops.workbench.db.dao.UserDao;
+import org.pmiops.workbench.db.dao.WorkspaceDao;
 import org.pmiops.workbench.db.model.DbUser;
 import org.pmiops.workbench.db.model.DbUserInitialCreditsExpiration;
+import org.pmiops.workbench.db.model.DbUserInitialCreditsExpiration.NotificationStatus;
+import org.pmiops.workbench.db.model.DbWorkspace;
+import org.pmiops.workbench.leonardo.LeonardoApiClient;
+import org.pmiops.workbench.mail.MailService;
+import org.pmiops.workbench.model.BillingStatus;
+import org.pmiops.workbench.test.FakeClock;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.config.ConfigurableBeanFactory;
 import org.springframework.boot.test.autoconfigure.orm.jpa.DataJpaTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Import;
+import org.springframework.context.annotation.Scope;
 
 @DataJpaTest
 @Import({
-  FakeClockConfiguration.class,
   InitialCreditsExpirationServiceImpl.class,
 })
 public class InitialCreditsExpirationServiceTest {
 
   @Autowired private InitialCreditsExpirationService service;
 
+  @SpyBean private UserDao spyUserDao;
+
+  @SpyBean private WorkspaceDao spyWorkspaceDao;
+
+  @MockBean private MailService mailService;
+
+  @MockBean private FakeClock fakeClock;
+
+  @MockBean private LeonardoApiClient leonardoApiClient;
+
+  private static final Timestamp NOW = Timestamp.from(FakeClockConfiguration.NOW.toInstant());
+  private static final Timestamp NOW_PLUS_ONE_DAY =
+      Timestamp.from(FakeClockConfiguration.NOW.toInstant().plusSeconds(24 * 60 * 60));
+  private static final Timestamp NOW_MINUS_ONE_DAY =
+      Timestamp.from(FakeClockConfiguration.NOW.toInstant().minusSeconds(24 * 60 * 60));
+
+  private static WorkbenchConfig config;
+
+  private DbWorkspace workspace;
+
+  @TestConfiguration
+  static class Configuration {
+    @Bean
+    @Scope(ConfigurableBeanFactory.SCOPE_PROTOTYPE)
+    public WorkbenchConfig config() {
+      return config;
+    }
+  }
+
+  @BeforeEach
+  public void setUp() {
+    config = WorkbenchConfig.createEmptyConfig();
+    config.billing.accountId = "billingAccountId";
+    when(fakeClock.instant()).thenReturn(FakeClockConfiguration.NOW.toInstant());
+
+    workspace =
+        spyWorkspaceDao.save(
+            new DbWorkspace()
+                .setBillingAccountName("billingAccounts/" + config.billing.accountId)
+                .setWorkspaceId(1L));
+    when(spyWorkspaceDao.findAllByCreator(any())).thenReturn(Set.of(workspace));
+  }
+
+  private void verifyUserSaveOnlyDuringSetup() {
+    // Called once during setup but not during the test
+    verify(spyUserDao, times(1)).save(any());
+  }
+
   @Test
   public void test_none() {
     DbUser user = new DbUser();
@@ -32,9 +104,7 @@ public void test_userBypassed() {
     DbUser user =
         new DbUser()
             .setUserInitialCreditsExpiration(
-                new DbUserInitialCreditsExpiration()
-                    .setBypassed(true)
-                    .setExpirationTime(new Timestamp(1234567890L)));
+                new DbUserInitialCreditsExpiration().setBypassed(true).setExpirationTime(NOW));
     assertThat(service.getCreditsExpiration(user)).isEmpty();
   }
 
@@ -54,13 +124,143 @@ public void test_nullTimestamp() {
 
   @Test
   public void test_validTimestamp() {
-    Timestamp testTime = new Timestamp(1234567890L);
     DbUser user =
         new DbUser()
             .setUserInitialCreditsExpiration(
-                new DbUserInitialCreditsExpiration()
-                    .setBypassed(false)
-                    .setExpirationTime(testTime));
-    assertThat(service.getCreditsExpiration(user)).hasValue(testTime);
+                new DbUserInitialCreditsExpiration().setBypassed(false).setExpirationTime(NOW));
+    assertThat(service.getCreditsExpiration(user)).hasValue(NOW);
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_null() {
+    service.checkCreditsExpirationForUserIDs(null);
+    verify(spyUserDao, never()).findAllById(any());
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_emptyList() {
+    service.checkCreditsExpirationForUserIDs(new ArrayList<>());
+    verify(spyUserDao, never()).findAllById(any());
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_noExpirationRecord() throws MessagingException {
+    DbUser user = spyUserDao.save(new DbUser());
+    when(spyUserDao.findAllById(List.of(user.getUserId()))).thenReturn(List.of(user));
+
+    service.checkCreditsExpirationForUserIDs(List.of(user.getUserId()));
+
+    verify(mailService, never()).alertUserInitialCreditsExpired(any());
+    verifyUserSaveOnlyDuringSetup();
+    verify(spyWorkspaceDao, never())
+        .updateBillingStatus(workspace.getWorkspaceId(), BillingStatus.INACTIVE);
+    verify(leonardoApiClient, never()).deleteAllResources(workspace.getGoogleProject(), false);
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_bypassed() throws MessagingException {
+    DbUser user =
+        spyUserDao.save(
+            new DbUser()
+                .setUserInitialCreditsExpiration(
+                    new DbUserInitialCreditsExpiration().setBypassed(true).setExpirationTime(NOW)));
+    when(spyUserDao.findAllById(List.of(user.getUserId()))).thenReturn(List.of(user));
+
+    service.checkCreditsExpirationForUserIDs(List.of(user.getUserId()));
+
+    verify(mailService, never()).alertUserInitialCreditsExpired(any());
+    verifyUserSaveOnlyDuringSetup();
+    verify(spyWorkspaceDao, never())
+        .updateBillingStatus(workspace.getWorkspaceId(), BillingStatus.INACTIVE);
+    verify(leonardoApiClient, never()).deleteAllResources(workspace.getGoogleProject(), false);
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_unexpired() throws MessagingException {
+    DbUser user =
+        spyUserDao.save(
+            new DbUser()
+                .setUserInitialCreditsExpiration(
+                    new DbUserInitialCreditsExpiration()
+                        .setBypassed(false)
+                        .setExpirationTime(NOW_PLUS_ONE_DAY)
+                        .setNotificationStatus(NotificationStatus.NO_NOTIFICATION_SENT)));
+    when(spyUserDao.findAllById(List.of(user.getUserId()))).thenReturn(List.of(user));
+
+    service.checkCreditsExpirationForUserIDs(List.of(user.getUserId()));
+
+    verify(mailService, never()).alertUserInitialCreditsExpired(any());
+    verifyUserSaveOnlyDuringSetup();
+    verify(spyWorkspaceDao, never())
+        .updateBillingStatus(workspace.getWorkspaceId(), BillingStatus.INACTIVE);
+    verify(leonardoApiClient, never()).deleteAllResources(workspace.getGoogleProject(), false);
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_expiredPreviouslySentNotification()
+      throws MessagingException {
+    DbUser user =
+        spyUserDao.save(
+            new DbUser()
+                .setUserInitialCreditsExpiration(
+                    new DbUserInitialCreditsExpiration()
+                        .setBypassed(false)
+                        .setExpirationTime(NOW_MINUS_ONE_DAY)
+                        .setNotificationStatus(NotificationStatus.EXPIRATION_NOTIFICATION_SENT)));
+    when(spyUserDao.findAllById(List.of(user.getUserId()))).thenReturn(List.of(user));
+
+    service.checkCreditsExpirationForUserIDs(List.of(user.getUserId()));
+
+    verify(mailService, never()).alertUserInitialCreditsExpired(any());
+    verifyUserSaveOnlyDuringSetup();
+    verify(spyWorkspaceDao, never())
+        .updateBillingStatus(workspace.getWorkspaceId(), BillingStatus.INACTIVE);
+    verify(leonardoApiClient, never()).deleteAllResources(workspace.getGoogleProject(), false);
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_expiredUnsentNotification()
+      throws MessagingException {
+    DbUser user =
+        spyUserDao.save(
+            new DbUser()
+                .setUserInitialCreditsExpiration(
+                    new DbUserInitialCreditsExpiration()
+                        .setBypassed(false)
+                        .setExpirationTime(NOW_MINUS_ONE_DAY)
+                        .setNotificationStatus(NotificationStatus.NO_NOTIFICATION_SENT)));
+    when(spyUserDao.findAllById(List.of(user.getUserId()))).thenReturn(List.of(user));
+
+    service.checkCreditsExpirationForUserIDs(List.of(user.getUserId()));
+
+    verify(mailService, times(1)).alertUserInitialCreditsExpired(any());
+    // Called once during setup and once during the test
+    verify(spyUserDao, times(2)).save(any());
+    verify(spyWorkspaceDao, times(1))
+        .updateBillingStatus(workspace.getWorkspaceId(), BillingStatus.INACTIVE);
+    verify(leonardoApiClient, times(1)).deleteAllResources(workspace.getGoogleProject(), false);
+  }
+
+  @Test
+  public void test_checkCreditsExpirationForUserIDs_expiredUnsentNotificationWithMailException()
+      throws MessagingException {
+    DbUser user =
+        spyUserDao.save(
+            new DbUser()
+                .setUserInitialCreditsExpiration(
+                    new DbUserInitialCreditsExpiration()
+                        .setBypassed(false)
+                        .setExpirationTime(NOW_MINUS_ONE_DAY)
+                        .setNotificationStatus(NotificationStatus.NO_NOTIFICATION_SENT)));
+    when(spyUserDao.findAllById(List.of(user.getUserId()))).thenReturn(List.of(user));
+    doThrow(new MessagingException()).when(mailService).alertUserInitialCreditsExpired(any());
+
+    service.checkCreditsExpirationForUserIDs(List.of(user.getUserId()));
+
+    verify(mailService, times(1)).alertUserInitialCreditsExpired(any());
+    verifyUserSaveOnlyDuringSetup();
+    verify(spyWorkspaceDao, times(1))
+        .updateBillingStatus(workspace.getWorkspaceId(), BillingStatus.INACTIVE);
+    verify(leonardoApiClient, times(1)).deleteAllResources(workspace.getGoogleProject(), false);
   }
 }
diff --git a/api/src/test/java/org/pmiops/workbench/utils/mappers/WorkspaceMapperTest.java b/api/src/test/java/org/pmiops/workbench/utils/mappers/WorkspaceMapperTest.java
index 01bb953a061..f12fd010917 100644
--- a/api/src/test/java/org/pmiops/workbench/utils/mappers/WorkspaceMapperTest.java
+++ b/api/src/test/java/org/pmiops/workbench/utils/mappers/WorkspaceMapperTest.java
@@ -26,6 +26,8 @@
 import org.pmiops.workbench.db.model.DbWorkspace;
 import org.pmiops.workbench.initialcredits.InitialCreditsExpirationService;
 import org.pmiops.workbench.initialcredits.InitialCreditsExpirationServiceImpl;
+import org.pmiops.workbench.leonardo.LeonardoApiClient;
+import org.pmiops.workbench.mail.MailService;
 import org.pmiops.workbench.model.BillingStatus;
 import org.pmiops.workbench.model.FeaturedWorkspaceCategory;
 import org.pmiops.workbench.model.ResearchOutcomeEnum;
@@ -86,7 +88,14 @@ public class WorkspaceMapperTest {
     InitialCreditsExpirationServiceImpl.class,
     WorkspaceMapperImpl.class,
   })
-  @MockBean({UserDao.class, WorkspaceDao.class, ConceptSetService.class, CohortService.class})
+  @MockBean({
+    UserDao.class,
+    WorkspaceDao.class,
+    ConceptSetService.class,
+    CohortService.class,
+    MailService.class,
+    LeonardoApiClient.class
+  })
   static class Configuration {}
 
   @BeforeEach