I received this link at my email It's coming from Microsoft Rewards

Do not use the email link to verify the message; open the Microsoft Rewards dashboard independently at https://rewards.bing.com and check whether the same promotion or notification appears there.

The link begins with clicks.customeremail.microsoftrewards.com and contains an encoded go.microsoft.com destination, which is consistent with a Microsoft email-tracking pattern. However, that alone cannot prove the particular email is authentic because sender names and addresses can be spoofed.

Verify the message safely

1. Open a new browser tab and type https://rewards.bing.com yourself.
2. Sign in to the Microsoft account associated with Rewards.
3. Check the dashboard, redemption area, and any listed sweepstakes or offers. Microsoft identifies this as the official site for viewing Rewards opportunities and account status.^1^
4. If the offer does not appear, avoid the email link. Its absence is a reason for caution, although it does not conclusively prove that an informational email is fraudulent.
5. If confirmation is still needed, contact Microsoft Rewards Support through the official form at https://rewards.bing.com/support.

Check the sender and message authentication

Microsoft documents these Rewards sender addresses:

• [Email]
• [Email]

These are approved Rewards communication addresses.^1^ A matching address is only a supporting indicator—not definitive proof—because the visible From address can be spoofed.

Inspect the full message headers or original message and look for:

• SPF: pass
• DKIM: pass
• DMARC: pass
• No Outlook warning that the sender could not be verified

Also check the actual address, not merely the displayed “Microsoft Rewards” name. Multiple authentication failures, a mismatched sender domain, or an unverified-sender warning are suspicious.^2^

Treat the message as phishing if it:

• Pressures you to act immediately or claims you will lose a prize.
• Requests your password, MFA verification code, payment details, or other sensitive information.
• Contains an unexpected attachment.
• Redirects to a misspelled Microsoft domain or unrelated third-party site.

If you already opened the link

Simply opening it does not necessarily mean the account was compromised. If you entered a password, verification code, or payment information:

1. Change the Microsoft account password immediately.
2. Open https://account.live.com/Activity directly and review the last 30 days of sign-in activity.
3. For anything unrecognized, expand the entry and choose This wasn’t me or Secure your account, when offered.^3^
4. Update the account’s security information and contact the bank or card issuer if financial details were submitted.

Report it if suspicious

In Outlook or Outlook.com, select the message and choose Report > Report phishing. This reports the sender and removes the message from the inbox.^4^

References

1. Getting the most out of Microsoft Rewards | Microsoft Support
2. Protect yourself from phishing
3. What is the Recent activity page? | Microsoft Support
4. Phishing and suspicious behavior in Outlook | Microsoft Support