Managing personal Outlook.com account settings, security, and privacy
Do not click the email’s links; independently open your Microsoft account’s Recent activity page to verify whether any profile or security details were actually changed.
Verify the alert safely
- Open a new browser tab and manually go to https://account.live.com/Activity.
- Sign in and review the last 30 days of activity, especially entries such as:
- Profile info changed
- Password changed
- An email address, phone number, alias, or verification app added or removed
- Successful sign-in or Unusual activity detected
- Expand suspicious entries to inspect the date, location, device, application, and access method.
- For an entry under Unusual activity, select This wasn't me if you do not recognize it. For suspicious activity in the regular Recent activity section, select Secure your account.^1^
The absence of a matching entry increases suspicion about the email, but does not conclusively prove it is fake because Microsoft does not display every account event.
Check the message
Microsoft documents [Email] as the legitimate sender for its unusual-sign-in alerts.^2^
However, a matching visible address alone is not proof: phishing messages can spoof sender information. Treat the independently accessed Recent activity page—not links or buttons in the message—as the authoritative check. Unexpected attachments, requests for passwords, and Outlook yellow or red safety warnings are additional danger signs.^3^
If the change was not yours
- Open your Microsoft account’s Security page independently.
- Change the password to a new, unique password.
- Update the account’s security information.
- Remove all trusted devices.
- Review Recent activity again and mark unauthorized entries appropriately.
Microsoft recommends these measures when someone else may have accessed the account.^4^
If the email appears fraudulent
In Outlook.com, select the message without opening its links, then choose Report > Report phishing. Reporting normally removes it from the Inbox and helps improve Microsoft’s filtering, so a separate deletion step is generally unnecessary.^5^
If account access or self-service recovery fails, use Contact Microsoft Support through Microsoft’s support page.^4^
References