POSSIBLE SPAM RECEIVED .... details below

R D 20 Reputation points
2026-10-26T15:53:49.54+00:00

From Microsoft: New Updates Regarding Your Account.

E-mail Management******@optimum.net

Message was: We regret to notify you that your Microsoft account is not actively safeguarded, as indicated by our system; your account has not yet been linked to our new security signal. On October 31, 2026, old versions of Outlook Mail will be disabled. To continue using your mailbox, please accept our updated Terms of Service.

If you do not complete this upgrade by November 3rd 2026, your mailbox may be disabled, and any saved data will be permanently deleted.

Above message came Oct 26 to my ******@msn.com - which gets lots of SPAM from other sources, none relating to Microsoft. This account is used on Medical portals; subscriptions to newsletters
(The other SPAM Relates to Docusign (phony contracts, etc.) - most in my JUNK folder and the rest in my Inbox. I usually just declare them as SPAM and Block them.

I have several other Outlook accounts too that do NOT get SPAM.

Since the above messages seemed to refer to this MSN account, I was afraid to delete it if it might legitimate.
(I never heard of a Security Signal? Will my account be deleted Oct 31?

So is this a legitimate message, and do I have to do something by November?

Outlook | Windows | Classic Outlook for Windows | For home
0 comments
Answer accepted by question author

AI answer

2026-10-26T15:54:44.8633333+00:00

This is a phishing email; do not click its link or accept its supposed terms, and your MSN mailbox will not be deleted on October 31 because of this message.

The wording closely matches a documented phishing campaign claiming that “old” Outlook mail must be upgraded through an email link to prevent account termination.^1^ “New security signal” is not something you need to activate from this email. The urgent deadline, threat of permanent deletion, and request to follow a link are standard phishing warning signs.^2^

What to do now

  1. Do not click any link, open an attachment, reply, or call a number in the message.
  2. In Outlook, select the message and choose Report > Report phishing from the ribbon. This reports it to Microsoft and removes it from the Inbox.^3^
  3. Delete the message if it remains.
  4. Optionally block the sender. Reporting phishing does not automatically block future mail from that address.^4^

The visible sender name is not proof of origin because phishing messages can spoof Microsoft-looking names or addresses. Microsoft documents @accountprotection.microsoft.com as its trusted domain for Microsoft-account security notifications; even then, check that the message concerns an action you actually requested.^5^

Check the account safely

If you want reassurance, do not use anything in the email. Open a new browser window, manually go to the Microsoft account Security basics page, and select Review activity. The Recent activity page shows sign-in activity from the last 30 days.^6^

  • If all activity is yours, no additional account action is required.
  • For an unfamiliar item under Unusual activity, expand it and select This wasn’t me.
  • For suspicious activity under Recent activity, select Secure your account.
  • Change the password if there is evidence that somebody accessed the account.^7^

If you only opened the email and did not select its link or provide information, reporting and deleting it is sufficient.

If you entered your Microsoft password:

  1. Open Microsoft account Security basics directly in a fresh browser window.
  2. Change the password immediately.
  3. Review recent activity and mark anything unfamiliar.
  4. Review your security information and enable two-step verification.
  5. If a file was downloaded or opened, run a full antivirus scan.

If you entered payment or medical information, also contact the relevant bank, card issuer, or medical provider through its official website or published phone number—not through details in the email.

References

  1. I received an email about updating your Terms of Service, Security Policy, and Privacy Policy. - Microsoft Q&A
  2. Protect yourself from online scams and attacks | Microsoft Support
  3. Protect yourself from phishing
  4. Phishing and suspicious behavior in Outlook | Microsoft Support
  5. Can I trust email from the Microsoft account team? | Microsoft Support
  6. Check the recent sign-in activity for your Microsoft account
  7. What happens if there's an unusual sign-in to your account | Microsoft Support
AI-generated content may be incorrect. Read our transparency notes for more information.

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marcin Policht 112.8K Reputation points MVP Volunteer Moderator
    2026-10-26T15:55:54.5933333+00:00

    This is a phishing email, not a legitimate Microsoft account notification. You do not need to accept the purported updated Terms of Service, click any links in the message, or take action by October 31 or November 3, 2026, based on this email.

    Several details indicate that the message is fraudulent. It was sent from ******@optimum.net, which is not a Microsoft email domain. The wording about a "new security signal" is not a standard Microsoft account security requirement. The threat that your mailbox and all saved data will be permanently deleted unless you act by a deadline is another common phishing tactic. Microsoft does not require you to accept a security upgrade through an unsolicited email from an unrelated domain to prevent your Outlook.com or MSN mailbox from being deleted.

    Your @msn.com address is a Microsoft email account, and the fact that this message specifically names or targets that address does not establish that the message is genuine. Spammers can discover or obtain email addresses from mailing lists, data breaches, compromised services, or other sources. Given that this account receives substantial spam while your other Outlook accounts do not, your address may have been exposed through one of those sources. Its use for medical portals and newsletters could be relevant, although the spam alone does not establish how the address was obtained.

    To verify your account's status, open a new browser tab and manually navigate to https://account.microsoft.com. Sign in to your MSN account and review its security information and any notifications displayed there. Do not use links or telephone numbers in the suspicious email. You can also open Outlook directly at https://outlook.live.com and confirm that your mailbox is functioning normally. If Microsoft actually requires a security action, verify it through these official account pages rather than relying on the email.

    You should report the message as phishing in Outlook and then delete it. If it is already in your Junk Email folder, you can report it there as well. Blocking the sender is optional, but it may have little effect because spammers frequently change their sending addresses.

    You do not need to delete your MSN account or stop using it for medical portals and newsletters. If you have not clicked any links, opened attachments, or supplied credentials, receiving this message alone does not mean your account has been compromised. If you did enter your password through a link in the message, change it immediately through Microsoft's official website and review your account's recent sign-in activity.

    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.