Microsoft account unusual sign-in activity email, -----> Is this phishing?

Anonymous
2021-12-17T17:27:28+00:00

Is this legit?

If so, what should I look for and do?

Microsoft 365 and Office | Subscription, account, billing | Other | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

122 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2023-02-20T15:23:42+00:00

    The email I got same day (this morning) lists the exact same title & details, even the exact same IP Address, but the date in my email has a slightly different time (12:50:23 +0000). This info does not match up with a recent login attempt (looking at my Recent Activity page).

    If I reply to the email though, shows me emailing to <@hotmail.com>. If I click one of the links in the email, then it has me mailing to <@hotmail.com>. Which clearly do not seem like Microsoft accounts.

    But coincidentally, my Recent Activity page shows so many unsuccessful login attempts from different countries I can only see back to Feb 7, so I just deleted the email & set up 2 factor authentication on my account, setup the Microsoft Authenticator app & an app password for some devices, & wrote down my recovery code.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2023-02-20T14:07:03+00:00

    I just got the same email saying a successful sign in from Madrid with the Australian IP address. The email said it was ******@microsft.com, but the log in and change notification links were to someone else's Hotmail.

    Signin details
    Country/region: Spain/Madrid
    IP address: 103.251.12.244
    Date: Mon, 20 Feb 2023 12:58:36 +0000
    Platform: Windows 11
    Browser: Chrome
    A user from Russia/Moscow just logged into your account from a new device, If this wasn't you, please report the user. If this was you, we'll trust similar activity in the future.

    The report the user shows: ******@hotmail.com?&cc=******@hotmail.com&subject=unusual%20signin%20activity&body=Report%20The%20User

    The click here shows: ******@hotmail.com?&cc=******@hotmail.com&Subject=Unsubscribe+me

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2023-02-20T05:56:07+00:00

    I was sent a message about the unusual activity with a sign-in from Spain and one from Russia. This was not me. How do I secure the account so that activity is from me only?

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-02-14T18:18:04+00:00

    Same here this is one i get all the time/a lot.

    Sign-in details
    Country/region: Russia/Moscow
    IP address: 103.225.77.255
    Date: Tue, 14 Feb 2023 15:37:57 +0000
    Platform: Windows 10
    Browser: Firefox
    A user from Russia/Moscow just logged into your account from a new device, If this wasn't you, please report the user. If this was you, we'll trust similar activity in the future.
    <br> ---
    To opt out or change where you receive security notifications,
    Thanks,
    The Microsoft account team

    Was this answer helpful?

    0 comments
  5. Anonymous
    2023-02-13T12:29:02+00:00

    Unusual sign.in activityWe detected something unusual about a recent sign-in to the Microsoft account ******@hotmail.com.Sign-in detailsCountry/region: Russia/MoscowIP address: 103.225.77.255Date: Sun, 12 Feb 2023 19:47:57 +0000Platform: Windows 10Browser: FirefoxA user from Russia/Moscow just logged into your account from a new device, If this wasn't you, please report the user. If this was you, we'll trust similar activity in the future.

    Report The User

    To opt out or change where you receive security notifications, click here.Thanks,The Microsoft account team

    Was this answer helpful?

    0 comments