received an email from [Moderator note: personal info removed]@alerts-microsoft.com

LORNA 40 Reputation points
2025-11-24T02:24:49.8133333+00:00

i received an email from [Moderator note: personal info removed]@alerts-microsoft.com saying that my password has expired & mentioned as below

Please note:

  • You will be unable to access your profile and email after your current session expires.
  • For your security, passwords are valid for 90 days..

i just want to check is it legitimate ?

Thanks

Outlook | Outlook for mobile | Outlook for iOS | For business
0 comments
Answer accepted by question author
AlexDN 11,450 Reputation points Microsoft External Staff Moderator
2025-11-24T02:51:54.1666667+00:00

Dear @LORNA,
Thank you for posting your question in the Microsoft Q&A forum. I understand that you received an email from account included @alerts-microsoft.com saying your password has expired and you want to know if the message is legitimate.

The email you received from @alerts-microsoft.com is unlikely to be legitimate. Microsoft’s official security and account alerts typically come from @accountprotection.microsoft.com or other trusted Microsoft domains. Messages that include urgent language like “session will expire” and reference generic 90‑day password rules are common indicators of phishing attempts.

What you should do:

  1. Do not click any links or open attachments in that email.
  2. Check your account directly by typing these URLs in your browser:
    Personal Microsoft account: https://account.microsoft.com
    Work/School account: https://mysignins.microsoft.com
  3. In Outlook, mark the message as Phishing and forward it to reportphishing@microsoft.com
  4. If you clicked any link or entered your password, please change your password immediately and enable Multi‑Factor Authentication (MFA).

Please understand that our initial response does not always resolve the issue immediately. However, with your help and more detailed information, we can work together to find a solution.
I truly appreciate your patience and understanding. If you have any further questions or need further clarification, please feel free to reach out. I'm looking forward to hearing from you. 

Thank you for your cooperation.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

1 person found this answer helpful.
Answer accepted by question author

AI answer

2025-11-24T02:24:57.8633333+00:00

To determine if the email from ******@alerts-microsoft.com is legitimate, you should check the sender's email address. Microsoft support typically uses the following domains to send emails:

  1. microsoft.com
  2. microsoftsupport.com
  3. mail.support.microsoft.com

Since the email you received is from alerts-microsoft.com, it does not match any of the official Microsoft domains, which raises a red flag. This could indicate that the email is a phishing attempt.

It is advisable not to click on any links or provide any personal information in response to this email. For further guidance on identifying phishing emails and reporting them, you can refer to Microsoft's resources on protecting yourself from phishing.

AI-generated content may be incorrect. Read our transparency notes for more information.

Was this answer helpful?

1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.