Microsoft Redeem Cash Back Rewards Hacked?

Yes—treat this as suspicious, especially if the last 4 digits shown do not match any card associated with the account.

Recommended actions:

1. Do not use links from the email again. Sign in only through the official Microsoft account or Rewards pages.
2. Check recent account activity and secure the account immediately. If the account may be compromised, use the Microsoft account recovery flow.
3. Change the password on the Microsoft account and any other account using the same password. Use a unique password.
4. Turn on multifactor authentication for the account if it is not already enabled.
5. Review recent transactions on bank and card accounts. Look for any charge that is unfamiliar, including very small test charges.
6. If any payment method appears affected, contact the card issuer or bank immediately and report possible fraud.
7. Check Microsoft Rewards order history to confirm whether the reward was redeemed from the account and view the reward details there instead of relying on the email.
8. If mail behavior has changed, check Outlook mail rules. A reported case showed a malicious rule sending messages to Junk; removing the bad rule resolved it.

For the gift card itself, Microsoft Rewards states that reward details can be retrieved from Order History by selecting Order Details or Resend.

• How to recover a hacked or compromised Microsoft account
• Protect yourself from phishing
• What to do if your credit or debit card info is stolen
• Learn about Microsoft Rewards
• Email hacked now all email goes to junk - Microsoft Q&A