Additional sign-in or account-related issues within Microsoft Teams for Education
Dear @(3H09) Lau Hin Ting Ethan
I understand your concern about suspicious activity in Microsoft Teams. If you suspect that someone else has accessed your Microsoft 365 account, I recommend checking the sign-in history first.
For a work or school account:
- Go to https://mysignins.microsoft.com and sign in.
- Select Recent Activity.
- Review the sign-ins and check the date/time, location, device, browser, application, and sign-in status.
- If you see a successful sign-in that you do not recognize, change your password immediately and review your MFA/security methods. Microsoft recommends doing this if you find unfamiliar sign-in activity. Please refer to this document: View your work or school account sign-in activity from My Sign-ins
If you are a Microsoft 365 administrator, you can also check Microsoft Admin Center > Microsoft Entra admin center > Entra ID > Monitoring & health > Sign-in logs. These logs provide more detailed information about the user, application, IP/location, device, and authentication method. Please refer to this document: Learn about the sign-in log activity details
Please note that an unfamiliar location does not always mean an account was compromised. VPNs, mobile networks, and other network routing can make the reported location different from your actual location.
If the sign-in history shows an unfamiliar successful sign-in, I would recommend changing the password and reviewing your MFA/security information before continuing to use Teams.