Sending, receiving, and organizing email in Outlook.com
This is most likely a phishing scam, especially if the sender addresses look suspicious.
Signs that match phishing in this case:
- Messages use urgency or fear, such as warning that the mailbox will be deactivated or data will be deleted.
- The sender address does not use an official Microsoft support domain.
- The message tries to push immediate action through links or attachments.
Microsoft support states that legitimate support emails use these domains:
-
microsoft.com -
microsoftsupport.com -
mail.support.microsoft.com -
office365support.com -
techsupport.microsoft.com
If the email came from a different domain, it is likely phishing.
What to do:
- Do not reply.
- Do not click links or open attachments.
- In Outlook, check for warning indicators such as an unverified sender (
?in the sender image), aviatag, or yellow/red safety bars. - If signing in is necessary, go directly to Outlook.com and verify the address bar includes
login.live.combefore entering a password. - Mark the message as junk or phishing and delete it.
- If there is concern the account was already accessed, follow the Outlook.com account recovery guidance.
Outlook also shows signs of suspicious mail:
- A
?in the sender image can mean the sender could not be verified. - A
viatag can indicate the actual sending domain differs from the displayed From address. - A red safety bar means Outlook.com blocked something unsafe and the message should not be opened.