Online Threat Alerts (OTA) - Alerting you to scams and frauds.
account-security-noreply accountprotection.microsoft.com Scam Emails

While account-security-noreply@accountprotection.microsoft.com is a legitimate Microsoft email address, scammers often spoof it. If you received a verification code without initiating a login attempt, someone else may have triggered it, or it could be a phishing attempt.

What You Should Know

  • If it's Legitimate: Someone might be trying to access your account, or someone accidentally entered your email while trying to log into their own.
  • If it's a Scam: The email may include alarming warnings and links that lead to fake Microsoft login pages designed to steal your password.

How to Handle it Safely

  1. Never click links: Do not click any links or download any attachments in the email.
  2. Verify on the web: Open your browser independently and navigate to the official Microsoft Account login page to check your account status.
  3. Check login history: Review the Recent Activity page to see if there are actual unauthorized login attempts on your account.
  4. Secure your account: If you suspect unauthorized access, immediately change your password and consider enabling Two-Step Verification.
waiting