Managing personal Outlook.com account settings, security, and privacy
Hello,
This is concerning, especially since the email address was used to change the contact information on your credit card account.
First, anyone can create an Outlook.com email address using another person’s name, provided that address is available. However, using it to impersonate someone or commit fraud is a violation of Microsoft’s Services Agreement.
You can report the fraudulent account to Microsoft here. Use the outlook spam option.
https://msrc.microsoft.com/report/
Explain that someone created an Outlook.com address using your full name and used it to make an unauthorized change to your Citi Home Depot credit card account. Include the fraudulent email address and any supporting evidence you have.
Microsoft can investigate and potentially suspend the account if it finds a policy violation. However, reporting it does not guarantee that Microsoft will delete it.
More importantly, I strongly recommend contacting Citi immediately. The unauthorized email change suggests that someone may have gained access to your credit card account.
Ask Citi to investigate the unauthorized change. And file police report as well.
I would prioritize securing your financial account first, then reporting the fraudulent Outlook.com address to Microsoft.