A tool for managing user identities, credentials, and access across on-premises and cloud environments
No. An email from msa@******@alert.com is not a genuine Microsoft support or Microsoft account email.
Microsoft account security emails are trusted when they come from the @accountprotection.microsoft.com domain. Microsoft support emails use domains such as microsoft.com, microsoftsupport.com, mail.support.microsoft.com, office365support.com, or techsupport.microsoft.com. A different domain is a strong phishing indicator.
The message content is also suspicious:
- It asks to click links to “upgrade your account security” or “cancel this request.”
- It uses urgency around account cancellation.
- It uses a generic signature like “E Mail service team.”
Recommended actions:
- Do not click any links or open attachments.
- Delete or report the message as phishing.
- Check recent sign-in activity on the Microsoft account at the Recent activity page to verify whether there was any real account activity.
- If any link was already clicked or credentials were entered, change the Microsoft account password immediately and review security settings.
References:
- Can I trust email from the Microsoft account team? | Microsoft Support
- How to determine if an email from Microsoft support is genuine
- Check the recent sign-in activity for your Microsoft account
- Is this legit email also? - Microsoft Q&A
- Account deactivation email from "The Office Team" - Microsoft Q&A