Share via

If the X-SID-PRA does have my email listed should I be worried?

Anonymous
2024-12-30T05:10:43+00:00

I too recently received the scam email saying they'll send videos to my contacts if I don't pay. I checked the X-SID-PRA and it has my email listed. The line below that says X-SID-Result: FAIL. I did a test email to myself and the X-SID-Result says PASS. Is this anything I should be worried about since the PRA does say my email but then the result says FAIL. I am wondering if someone actually got into my email and sent me that email from my account? Thanks for any advice or actions I should take to protect myself. I already changed my password and I know not to pay and delete the message, etc.

Outlook | Windows | New Outlook for Windows | For business

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-01-07T23:16:57+00:00

    Hi,

    I've recently received the same email today.

    My X-SID-PRA also has my email listed. And the line below that says X-SID-Result: FAIL.

    I would like to know if you've received any further mails like this? Or if it was just a spam mail.

    Thank you.

    4 people found this answer helpful.
    0 comments
  2. Anonymous
    2024-12-31T04:33:31+00:00

    Dear Philip Demme

    Thank you for posting in the Microsoft community!

    Based on your description, I understand that you received a ransom email from yourself and were unable to find traces left by the hacker in the X-SID, so please point out if my understanding is wrong.

    I suggest you continue to enquire about [Return-Path] and the [From] [To] that appear in pairs above and below. Currently hackers are more likely to use the alias mechanism to disguise emails. This usually shows up in [From][To]. I suggest you send yourself a test email to compare the differences between these three places.

    Microsoft Mail's [From][To] should consist of both the name and the outgoing email address when sent normally. If you can only see one of them, it means that there is an anomaly in this email. It was not sent by you.

    My personal advice is that this is just a ransom email and these emails will use templates with similar content, there is no need to worry about that too much. Click this link (https://account.live.com/proofs/manage/additional) on another device to add more security verification information to your account and periodically check for unusual items in your account activity. If necessary, changing your password or enabling a high-security passwordless login method is the best option. (How to help keep your Microsoft account safe and secure - Microsoft Support)

    This reply may not directly address your issue, so feel free to let me know how it goes any time by repling below.

    I look forward to hearing from you!

    Carmid.L-MSFT | Microsoft Community Support Specialist

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2025-06-25T16:26:03+00:00

    Did anything happen?

    0 comments
  4. Anonymous
    2025-03-25T16:27:50+00:00

    Just got this today - exact same texting as OP - to/from has my email, X-SID-PRA has my email but says FAIL. Changed my password afterwards. I see a substantial amount of failed login attempts from various WW locations over the past days, but as I said they all failed. Should I do anything else, other than wait 48 hours and see of my contacts get flooded with private pictures?

    0 comments