Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Hello Cwslzn,
Welcome to Microsoft Community.
I understand you received a suspicious email, and you would like to confirm if the email is from Microsoft.
If you get an email from Microsoft account team and the email address domain is @accountprotection.microsoft.com, it is safe to trust the message and open it.
Microsoft uses this domain to send email notifications about your Microsoft account. These notifications can include security codes for two-step verification and account update information, such as password changes
Kindly check on this link for more information on this issue
Can I trust email from the Microsoft account team? - Microsoft Support
Best Regards,
Support agents first name | Microsoft Community Support Specialist