Legit email or spam

@infoemail.microsoft.com appears to be a legitimate Microsoft email domain, but the visible From address alone does not prove that the specific message is genuine.^1^

Check the specific message safely

1. Do not click its links or open attachments yet.
2. In Outlook, inspect the sender:
   • Hover over or select the sender name to reveal the complete address.
   • Look for a question-mark sender icon, an Unverified warning, or a via address that differs from the displayed From address. These can indicate that Outlook could not authenticate the sender or detected a mismatch.^2^
3. Verify the email’s claim independently. Open a new browser window and access your Microsoft account or Microsoft 365 subscription through your usual saved address—do not use the email’s link. Check whether the same billing, renewal, or account notice appears there.
4. Treat requests for passwords, payment details, recovery codes, or unexpected attachment downloads as suspicious. Sender addresses can be spoofed even when they visibly show a safe domain.^2^
5. If the message remains suspicious, select it in Outlook and choose Report → Report phishing. Reporting it does not automatically block the sender.^2^

Be careful not to confuse infoemail.microsoft.com with similar-looking domains such as infomail.microsoft.com or infomails.microsoft.com; they are different domain names.

References

1. is "******@infoemail.microsoft.com "correct email address
2. Phishing and suspicious behavior in Outlook | Microsoft Support