Unusual sign-in activity

Question

Unusual sign-in activity

TB 35

I received an email this morning that someone signed (or tried) into my Microsoft account from Thailand.

How can I tell if they were successful?

Yes I did change my password

Thanks

R P 0 Reputation points

2026-07-11T14:00:15.7666667+00:00

I also had an attempted login from another country, which I declined in my authenticator app, and changed my password. Days later it happened again, from the same foreign country, so I went passwordless as well as 2-factor authentication. Both times I tried to check my recent sign-in activity page but it only showed one entry, my successful sign-in to check the activity page. This is utterly useless. How can I see previous sign-ins and (especially) attempted sign-ins to flag these as not me? By showing only one sign in, Microsoft is making me less safe, or am I missing something? To flag fraudulent sign-in attempts I need to see them.

Answer accepted by question author

AceRobertT 14,455

Hello TB. To see if that odd sign-in attempt was successful, sign in to your Microsoft account's Recent Activity page. You will find a granular history of your sign-ins from location, device type, IP address, and whether it was a successful sign-in or blocked. If you see a “Successful sign-in” from Thailand and you were not in Thailand, you’ll click “It wasn’t me!” and Microsoft will take action and secure your account.

Don't forget, you already changed your password great move! Also, consider enabling two-factor authentication (2FA) to secure your account better. For additional tips about what unusual activity Microsoft looks for and what actions you can take, Microsoft has an explanation on their support website. What happens if there's an unusual sign-in to your account

Here's the reference: What happens if there's an unusual sign-in to your account

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Best regards,

TB 35 Reputation points

2025-08-01T01:25:31.3566667+00:00

Thanks Ace !!

1 additional answer

Your answer

R P 0 Reputation points

2026-07-11T14:00:15.7666667+00:00

I also had an attempted login from another country, which I declined in my authenticator app, and changed my password. Days later it happened again, from the same foreign country, so I went passwordless as well as 2-factor authentication. Both times I tried to check my recent sign-in activity page but it only showed one entry, my successful sign-in to check the activity page. This is utterly useless. How can I see previous sign-ins and (especially) attempted sign-ins to flag these as not me? By showing only one sign in, Microsoft is making me less safe, or am I missing something? To flag fraudulent sign-in attempts I need to see them.
TB 35 Reputation points

2025-08-01T01:25:31.3566667+00:00

Thanks Ace !!

Answer 1

Hello TB!

It's smart that you changed your password after getting a warning about unusual sign-in activity. To check whether someone was actually able to access your Microsoft account, you can do the following:

Review Recent Activity:

Go to https://account.microsoft.com/security and sign in.

Under "Sign-in activity," you can view the list of recent sign-ins with details like location, device, and whether they were successful or blocked.

Look for any entries from Thailand and see if it says “Successful” or “Unsuccessful.”

Check for Security Alerts:

Microsoft often marks suspect activity as “blocked,” or you’ll see an alert requiring your review.

Review Account Changes:

Scan for any changes you didn’t make (like password, email, or recovery info changes).
If you see anything you don’t recognize, follow the prompts to secure your account.

Add/Verify Two-Factor Authentication:

Turn on two-step verification for extra protection.

Since you already changed your password, you’re on the right track. Double-check all sign-in sessions and devices, and sign out from everywhere if you’re concerned.

Best regards,

Jerald Felix

TB 35 Reputation points

2025-08-01T01:24:12.1466667+00:00

Thanks Jerald !!