suspicious email

Hello

We haven't heard from you in 72 hours, so we will consider your issue resolved. If you do need further help, please create a new thread to discuss your concerns through this link:Create a new question or start a discussion (microsoft.com), as we will not be monitoring this thread going forward.

Thank you for understanding.

Sincerely

Khou Sun

Microsoft Community Moderator

Hij129bwwg,

Greetings!

Thank you for posting in Microsoft Community.

Based on the description you posted, it seems that you have an issue with Outlook wherein you want to know if the email you have received is a legitimate email.

By the way, If you aren't sure about the source of an email, check the sender. You'll know it's legitimate if it's from the Microsoft account team at ******@accountprotection.microsoft.com.

Referenced link: What happens if there's an unusual sign-in to your account - Microsoft Support

In addition to that, we would like to also share some information on how to spot or identify a suspicious email.

Outlook shows indicators when the sender of a message is unverified, and either can't be identified through email authentication protocols or their identity is different from what you see in the From address.

• You see a '?' in the sender image When Outlook can't verify the identity of the sender using email authentication techniques, it displays a '?' in the sender photo. 
• Not every message that fails to authenticate is malicious. However, you should be careful about interacting with messages that don't authenticate if you don't recognize the sender. Or, if you recognize a sender that normally doesn't have a '?' in the sender image, but you suddenly start seeing it, that could be a sign the sender is being spoofed. You can learn more about Spoof Intelligence from Microsoft 365 Advanced Threat Protection and Exchange Online Protection in the Related topics below.
• The sender's address is different than what appears in the From address Frequently, the email address you see in a message is different than what you see in the From address. Sometimes phishers try to trick you into thinking that the sender is someone other than who they really are. When Outlook detects a difference between the sender's actual address and the address on the From address, it shows the actual sender using the via tag, which will be underlined. In this example, the sending domain "suspicious.com" is authenticated, but the sender put "******@contoso.com" in the From address. Not every message with a via tag is suspicious. However, if you don't recognize a message with a via tag, you should be cautious about interacting with it. In Outlook and the new Outlook on the web, you can hover your cursor over a sender's name or address in the message list to see their email address, without needing to open the message.

**Note:**This feature is only available if you sign in with a work or school account.

Referenced link: Phishing and suspicious behaviour - Microsoft Support

Hope this helps,

Sincerely

Khou Sun

Microsoft Community Moderator