MUHAMMAD MUSA . Email address "******@live.ca" - Complaint -Fradulent Emails sent & received - Record Attached

Question

Team Microsoft

I am attaching copies of the emails which was sent to my self and reply was sent by myself  to the sender. 

Please kindly confirm, after checking your database  if these emails were originally sent or these are fake email correspondence. 

If these are originally sent  emails  then what is the IP address of these emails sent and received.

Please kindly advise if there is any further information is needed at my end.

Respectfully

Muhammad Musa

Ph:  416-473-2626

Answer 1

Hello MUHAMMAD MUSA, thank you for posting in the community.

I don’t have access to Microsoft’s internal systems, databases, or logs, so I’m unable to verify whether an email was originally sent by Microsoft or retrieve IP address information on your behalf.

That said, you can still review this yourself by checking the email’s message header. The message header works like a travel receipt for an email and shows where it came from and whether it passed basic security checks. View internet message headers in Outlook

Microsoft offers a free Message Header Analyzer that can help make this information easier to read: https://mha.azurewebsites.net/

If the email appears suspicious, the safest option is to report it as phishing directly in Outlook so Microsoft can review it.

Kind regards,

John Oli

Answer 2

To investigate fraudulent emails, you can utilize the Get-MessageTrackingLog cmdlet if you have access to the necessary Exchange Online or on-premises Exchange environment. This cmdlet allows you to search for message delivery information, which can help determine if the emails were originally sent or if they are fake.

Here’s an example command you can use to check the message tracking logs:

Get-MessageTrackingLog -Server Mailbox01 -Start "<start_date>" -End "<end_date>" -MessageSubject "<subject_of_email>"

Replace <start_date>, <end_date>, and <subject_of_email> with the appropriate values related to your situation.

If you need to check for attachments or specific content in the emails, you can also use the Search-Mailbox or New-ComplianceSearch cmdlets in Exchange Online. These commands allow you to search for specific queries against mailboxes and can help identify potentially fraudulent emails.

Unfortunately, I cannot confirm the IP address of the emails sent and received without access to the specific email logs or tracking information from Microsoft.

For further assistance, you may need to contact Microsoft support directly with your inquiry and any evidence you have regarding the fraudulent emails.