Is ******@accountprotection.microsoft.com a legitimate email from Microsoft Security?

Kathy White 5 Reputation points
2026-01-27T20:47:24.2833333+00:00

I am not sure of the child tag to use--

I received two emails from the email address "Microsoft account team" ******@accountprotection.microsoft.com address with the subject "Unusual sign-in activity" and they said one sign-in came from Italy at 8:08 pm GMT and one was from the United States at 8:10 PM GMT

There is a link to "review recent activity" in a blue box. (I did not click on it)

Is this legitimate? or is someone trying to access my account illegally?

If it is illegal, is there a legitimate address I can forward the emails to so that you can address it?

Thank you.

Outlook | Web | Outlook.com | Account management, security, and privacy

2 answers

Sort by: Most helpful
  1. EmilyS726 257.9K Reputation points Independent Advisor
    2026-01-27T22:08:17.58+00:00

    Hello,

    This email address is legit, but it doesn't necessarily mean it is referencing your account. If someone else left your email address as security contact (usually due to typo), you might end up getting their alerts.

    Sign into the account here: https://account.microsoft.com, then go to Security to review the sign in activities. When you reviewed the account's sign in activities.

    If you see any successful activitiest that are not yours, you want to change the password, make sure two-factor verfication is enabled. And go to security > manage how I sign in, make sure all security contact is correct.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments

  2. AI answer

    2026-01-27T20:47:33.54+00:00

    The email address accountprotection.microsoft.com is associated with Microsoft and is used for sending security alerts, such as notifications about unusual sign-in activity. The content of the emails you received, which mention sign-ins from different locations, is consistent with the types of alerts that Microsoft may send to inform users about potential unauthorized access to their accounts.

    However, it is always wise to exercise caution. If you are unsure about the legitimacy of the email, do not click on any links or provide any personal information. Instead, you can verify the email by checking the sender's address and ensuring it matches the domains used by Microsoft support, which include microsoft.com, microsoftsupport.com, and mail.support.microsoft.com.

    If you suspect that the email is a phishing attempt, you can report it to Microsoft. For guidance on how to report suspicious emails, you can refer to Microsoft's resources on phishing protection.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.