Hello JesusGarza2, I warmly welcome you to the community. I am Israel, an independent advisor and I would like to give you some advice to solve this problem.
I comment that if the email you received is from the Microsoft account team, then the domain of the address has to be @ accountprotection.microsoft.com. Only then can you follow whatever prompts the message contains with complete confidence.
I am attaching the link to an official support note so that you can confirm the information I am referring to.
https://support.microsoft.com/en-us/account-bil...
I am at your disposal if you have questions. Greetings.