This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Is this legit?
If so, what should I look for and do?
Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
I have this exact email as you - all information here is the same. Has to be a scam.
Same question... but my email shows that it actually came from a Microsoft server, with rogue links within the email. Unless you dig very deep it appears to have come from you guys... see below the screenshot.
X-IncomingTopHeaderMarker: OriginalChecksum:9F2F956A21611862730F91B4EAAEBE7C8658004CBE17A8306FB0BCCE505B33E6;UpperCasedChecksum:FC4718206DC6FD8B99E95A1A0875BE241ACAE14C5B8D7DFF014FDC776800C632;SizeAsReceived:329;Count:10 From: Microsoft account team <no-reply@microsoft.com> Subject: Microsoft account unusual sign-in activity To: xxxxxxxxxxxxxxxxxxxx Date: Fri, 9 Dec 2022 23:51:42 +0000 Reply-To: ******@isdalisdotus.com Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: 8bit X-IncomingHeaderCount: 10
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more
What was strange about mine was that the date of the email message was the day before the date listed in the message (under the IP address).