Managing personal Outlook.com account settings, security, and privacy
Dear Lita Patel,
Welcome to Microsoft Community.
Can I double-check the sender's address with you? *Microsoft@acaoff@com*
The address you listed is suspicious, but the content of the email seems credible.
One way to determine if an email is from Microsoft support is to check the sender's email address. Microsoft support uses the following domains to send emails:
microsoft.com
microsoftsupport.com
mail.support.microsoft.com
@accountprotection.microsoft.com
The address you listed is not included.
Source: How to determine if an email from Microsoft support is authentic - Azure | Microsoft Learn and Can I trust the emails I receive from the Microsoft account team? - Microsoft Support
Warning:
Before confirming this is a legit mail from Microsoft, Do not click any website link in the mail, they may contain virus or fraudulent pages.
Some websites may disguise as an Outlook login screen. This is totally fake, and the scammer wants you to enter your Microsoft account and password on their website and steal your account from the monitoring data in the background. Microsoft has nothing to do with this fake website, and please tell right from wrong!
I suggest you click on the link Additional security options (live.com) to check if your recent login activity has such record mentioned in the email.
Remember not to click on the link in the email.
Looking forward to your timely response, I will continue to follow up on your question here.
Best Wishes,
Stan.L - MSFT | Microsoft Community Support Specialist