Email notifications that "We received your request for a single-use code to use with your Microsoft account"

Those emails mean someone (or something) is trying to sign in using the Microsoft account and requesting verification codes, even if that person is not Audrey.

If the email address domain is @accountprotection.microsoft.com, the message itself is legitimate and sent by Microsoft. However, because the codes were not requested, treat this as potential unwanted sign-in attempts.

Next steps:

1. Do not use or reply to any codes not requested. Without the code, an attacker cannot complete sign-in.
2. Check recent sign-in activity:
   • Go to the Security basics page.
   • Select Review activity and look at the Recent activity and Unusual activity sections.
   • For any activity that is not recognized:
     • If it appears under Unusual activity, expand it and select This wasn't me.
     • If it appears under Recent activity, expand it and select Secure your account.
3. Change the password immediately from the Security basics page if there is any suspicion that someone else may have accessed the account.
4. Consider going passwordless to reduce these kinds of attempts:
   • Use methods such as Windows Hello, Microsoft Authenticator, SMS or email codes, or a physical security key instead of a traditional password. These are more secure and help prevent unauthorized access.

If verification codes continue to arrive without being requested, continue to ignore them and periodically review recent activity and security info to ensure the account remains secure.

References:

• Can I trust email from the Microsoft account team?
• Troubleshoot Microsoft verification code issues
• What happens if there's an unusual sign-in to your account