Managing personal Outlook.com account settings, security, and privacy
Hi Helen Allen,
This message is a phishing attempt. Please do not select UPDATE NOW, reply to the sender, or provide any account information. Microsoft does not require an “email version” upgrade through an email link to prevent an Outlook.com mailbox from being terminated.
You can also check the actual sender in the message header:
- Open the message without selecting any links.
- Select More actions (...) > View > View message details.
- Find the From and Return-Path fields and check whether the addresses match the displayed sender.
- Review Authentication-Results. Results such as
spf=fail,dkim=fail, ordmarc=fail, or an unrelated sending domain, are additional warning signs. However, a “pass” result alone does not prove that the message is trustworthy. View internet message headers in Outlook.
In Outlook.com, select the message and choose Report > Report phishing, then delete it. Reporting the message does not automatically block the sender, so the sender can also be added to the blocked senders list. See how to report phishing in Outlook.
If you selected the link or entered information, go directly to the Microsoft account Security page, change the password, review Recent activity and security information, enable two-step verification, and run a full security scan. Help protect your Outlook.com email account | Microsoft Support
If you did not open the link or provide information, reporting and deleting the message should be sufficient.
Please note that this is a user-to-user forum, so contributors cannot inspect the original message or verify its headers directly. I hope the above steps help you report the message and keep your account secure.