A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
To determine if the email you received regarding a maintenance issue is legitimate, you should check the sender's email address. Microsoft typically uses specific domains for their communications, such as microsoft.com, microsoftsupport.com, or mail.support.microsoft.com. If the email is from a different domain, it may not be genuine and could be a phishing attempt.
As for mailbox maintenance, you can find information related to mailbox utilization and maintenance in the Microsoft 365 admin center. Specifically, you can check the Health > Service health section for any advisories related to mailbox storage limits and maintenance alerts.
If you suspect the email is a phishing scam, do not click on any links or provide any personal information. Instead, you can report it to Microsoft and check your account directly through the official Microsoft website.
References: