microsoft account team email

coolcats

I have had a email that says someone has tried to change the password of my email account, if it was you use this link yes, if no this link. I suspect it is a scam, but wanted thoughts on it, thanks

GrumpyDil

Have you checked the email address the email came from? 

It might be a phishing email as I think Microsoft send an email or text with a code asking you to confirm your change.

However in the back of my mind I seem to recall an instance where someone tried to hack my account and I received a notification asking me to change my password/review my account security (which did come from Microsoft when I checked the sender details) and the links also directed to Microsoft, albeit I completed the changes directly without using any links in the email. 

Ant555

Almost certainly a scam/phishing email.

If you click either of the links then its likely to ask you to log in on a web site that looks remarkably like the real thing but isnt  - then it will record (steal) your credentials.

Many people will simply fall for this - you haven't which is great.

coolcats

it says no reply microsoft. com, so does look like it could be, but it has gone to my junk box. But with so many scams around its hard to know

[Deleted User]

coolcats said:

it says no reply microsoft. com, so does look like it could be, but it has gone to my junk box. But with so many scams around its hard to know

You've done good to be suspicious, the fact that it is in the junk box also indicates that it is a scam email. Do not click the links in the email. Even if it was genuine, you can deal with the email without clicking on the links and I would get in the habit of doing that anyway - ie google your way to the website in question.

This is what I would do, check sign in activity on your Microsoft account by going to the official website:

https://account.microsoft.com/security

Click on "Sign in activity" and have a look for anything suspicious. Screenshot from my account below - somebody always trying it on as you can see. Just be worried if there is a successful sign-in from an unfamiliar location.



I'm not worried about the above, my account is passwordless so nobody is getting into it without using 2 factor authentication. If you are worried, make sure you have a strong password and 2FA enabled or you could go passwordless if your device is compatible with Windows Hello.