Sending, receiving, and organizing email in Outlook.com
Yes — treat it as a phishing scam.
Common red flags in these messages include:
- claims that an account will be deactivated unless action is taken immediately
- requests to verify an account through an email link
- sender addresses that are not official Microsoft domains
- generic, urgent wording meant to pressure a quick click
What to check:
- Verify the sender domain. Microsoft support emails use domains such as:
-
microsoft.com -
microsoftsupport.com -
mail.support.microsoft.com -
office365support.com -
techsupport.microsoft.com
-
- Hover over links without clicking them and confirm the destination matches Microsoft.
- In Outlook, be cautious if the message shows an unverified sender indicator, a
?sender image, or aviatag. - Do not open attachments or click links in the message.
What to do instead:
- Delete the message or report it as phishing in Outlook.
- If account status needs to be checked, sign in directly to the Microsoft service in a fresh browser window instead of using links in the email.
- If any link was already clicked or credentials were entered, change the password immediately and enable multi-factor authentication.
The context also notes that Microsoft does not normally deactivate accounts just because a password was not changed within a short deadline, and similar “verify now or be deactivated” emails are identified as phishing.
- How to determine if an email from Microsoft support is genuine
- Protect yourself from phishing
- Phishing and suspicious behavior in Outlook
- I have received an email requesting I provide a new password or else in 24 hours my account will be deactivated - Microsoft Q&A
- Account deactivation email from "The Office Team" - Microsoft Q&A