Questionable Microsoft email

Question

Received email supposedly from Microsoft telling me I need to update my settings. This seems to be a RED FLAG and I suspect it to be a scam or phishing attempt to expose my personal information.

What is you take on this situation. email says not to reply to this email. Again RED FLAG.

Regards,

Capt. K (USMM - retired)

Answer 1

It's easy enough to learn how to impersonate Microsoft (or Amazon or American Express, etc.) on the internet. There is nothing that Microsoft or anyone else can do to prevent this. It's no different in real life.

That's why all of us have to have our b#llsh$t detectors on 'high' - on the internet as in real life - as you have successfully done.

Most of these kinds of email are stopped by spam filters, but some manage to get through anyway. It's a big cat and mouse game.

A search of the internet, or a question to your favorite AI, will show you how to detect these dangerous messages and how to handle them safely. Tread carefully: The professionals who create some of these messages are getting better at fooling people. (And they are professional, don't underestimate them.)

Answer 2

It sounds like you are right to be cautious about the email you received. Phishing attempts often use tactics like urging users to update settings or providing urgent requests for personal information. Here are some key points to consider:

1. Sender's Email Address: Check the sender's email address. Microsoft support emails should come from domains like microsoft.com, microsoftsupport.com, or mail.support.microsoft.com. If the email is from a different domain, it is likely a phishing attempt.
2. Requests for Personal Information: Legitimate emails from Microsoft will not ask for sensitive information like passwords or personal details through email.
3. Unsolicited Emails: If you did not expect to receive such an email, it is a red flag. Be wary of unsolicited communications that ask for action.
4. Do Not Reply or Click Links: Since the email advises against replying, it is another indicator that it may not be legitimate. Avoid clicking on any links or downloading attachments from suspicious emails.
5. Report the Email: If you suspect it is a phishing attempt, you can report it to Microsoft. For Outlook.com, you can select the email and mark it as phishing. For other Microsoft services, use the appropriate reporting tools.

If you have any doubts, it's always best to contact Microsoft support directly through their official channels to verify the email's legitimacy.

---

References:

• How do I know if an email from Microsoft support is genuine?
• How to protect against phishing attacks