Managing personal Outlook.com account settings, security, and privacy
Report the impersonation through Microsoft’s reporting channel for Outlook spam/impersonation at https://msrc.microsoft.com/report/.
Also preserve evidence before reporting:
- Keep copies of the fraudulent Outlook address.
- Save the scam messages or headers if available.
- Keep any related correspondence showing the impersonation attempt.
If the scam involves identity misuse or financial fraud, act immediately:
- Close any accounts that were accessed or opened fraudulently.
- Contact the fraud departments of affected companies.
- File a police report and keep a copy.
- Put a fraud alert on credit reports if identity theft is involved.
For suspicious messages in Outlook, be cautious with messages that show:
- a
?in the sender image - a
viatag showing the actual sending address differs from the From address
Do not click links, open attachments, or call phone numbers in those messages. If a downloaded Office file asks to Enable Content, close and delete it. If active content was already enabled, run a full antimalware scan.
References: