Share via

Recently begun receiving weekly emails from o365mc@microsoft.com regarding "Weekly digest: Microsoft service updates"

Jack Feckner 20 Reputation points
2026-03-25T03:55:36.8933333+00:00

Hi,

This month I begin to notice emails from the sending address o365mc@microsoft.com with the Subject "Weekly digest: Microsoft service updates" - check on this email content reveal no suspicions and it appears legitimate.

However when googling the address "o365mc@microsoft.com" there are some report that this address is potentially NOT legitimate. Could I receive clarification whether this sending address is legit or not.

Thanks,

Jack

Outlook | Windows | New Outlook for Windows | For business
0 comments No comments

Answer accepted by question author

Liora D 16,470 Reputation points Microsoft External Staff Moderator
2026-03-25T09:27:50.73+00:00

Dear @Jack Feckner,

I hope you’re having a good day.

Your concern is completely valid, and the mixed information you are seeing online is understandable.

The address o365mc@microsoft.com is a Microsoft‑owned sending address that is used by the Microsoft 365 Message Center. Microsoft 365 administrators can receive service communications from the Message Center either directly in the admin portal or via email notifications, including the “Weekly digest: Microsoft service updates” that you described. This type of weekly digest is an expected and documented behavior of the Message Center, and the content you described matches that purpose.
User's image

At the same time, it is important to understand why there are warnings about this address on the internet. In rare cases, Microsoft has confirmed that the Message Center’s email‑sharing functionality has been misused, allowing non‑Microsoft content to be delivered through the same infrastructure. In those situations, the sender address was still legitimate, but the content itself was not authored by Microsoft. This distinction is the main reason you will find conflicting answers online, some discussions are questioning the content, not the ownership of the domain.

Because of this, Microsoft does not recommend treating any email as trustworthy based on the sender address alone, even when the domain belongs to Microsoft. The reliable way to validate these messages is to confirm that the information in the email corresponds to what you see in the Microsoft 365 Admin Center > Health > Message Center, and that the links point only to Microsoft domains. When the email content aligns with the Message Center and does not request credentials, payments, or urgent action, it can be considered legitimate service communication.

I hope this clears up the confusion and thank you for taking security seriously.

Warm regards, 


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".    

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

2 people found this answer helpful.
0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.