Share via

Possible phishing from Microsoft Azure and Microsoft Cloud.

BILL CLEMENS 100 Reputation points
2026-02-26T22:15:26.8266667+00:00

Been getting emails from Microsoft Azure and Cloud. I'm not subscribed to Azure and have used very little Cloud. Azure reads, Azure: Activated Severity: 2 invoice-234147320. Your Azure Monitor alert was triggered. Cloud email reads: Re: Wed have tried to contact you several times before, but we have not received any response. If you have not resolved your issue today, all-out data will be completely deleted 2026.02.14, including your photos and videos__ID#I1C0-B6O3-3YF7___

I continue to delete these but continue to receive them. Any way to stop them?

Outlook | Outlook for mobile | Outlook for Android | For home
{count} votes

9 answers

Sort by: Most helpful
  1. Chkn-N-Rice 25 Reputation points
    2026-02-27T18:37:27.0033333+00:00

    I got this too. 2 seprate emails. I have no azure subscriptions associated with my email address, so... Must be fake news.

    5 people found this answer helpful.

  2. Massimiliano C 10 Reputation points
    2026-03-05T17:28:36.61+00:00

    Same situation happened to me today. I received an email from a legitimate Microsoft domain claiming a payment of $892 for a Defender subscription.

    They exploit the Azure alert system. They create a storage account, then create an alert action group where they insert our email addresses, write the alert message, and trigger the alert.

    The email is therefore sent from a legitimate Microsoft domain.

    At the bottom of the email you can unsubscribe from the mailing group they added you to.

    This makes the situation quite complicated. Microsoft should probably introduce some kind of filtering on the content of alert messages to prevent this type of abuse.

    2 people found this answer helpful.
    0 comments No comments

  3. HB 10 Reputation points
    2026-03-03T20:02:33.4133333+00:00

    Be quicker than the scammer. Do not call the number, and if you do, then, someone pretending to be a Microsoft Tech will call you. HANG UP, and DISCONNECT INTERNET CONNECTION IMMEDIATELY! Run an AntiVirus Scan (Full Disk Mode), and download Malwarebytes (and do a Full Scan). Change your:

    • Internet Connection Password
    • Email Password
    • Bank Password
    • Business / Personal Accounts Password

    Go to Experian, and do a Security Freeze on the 3 Credit Bureaus for a period of time. Get an account with a Personal Background Removal site to have your Personal Info removed from Data Broker sites. Layer your accounts with 2-Step Verification, and enhance the security with a Question for the accounts to verify you with the answer you will provide that only YOU WOULD KNOW THAT IS NOT PUBLICLY KNOWN. Opt out of 3rd Party Marketing from companies. Never share your Private Info with anyone who is not close to you or you cannot completely trust (if necessary, have a Legal Power Of Attorney). Change passwords as often as necessary. Only provide your phone number to trustworthy companies/people, and don't say your phone number (same with email) to a cashier for points for others to hear (request that you enter your phone number on the keypad). Turn off phone Hot Spot. Lastly, if necessary, if you have been compromised, then, contact the authorities (Police, State and Local Commissioner Judges, Better Business Bureau, FBI, etc.).

    2 people found this answer helpful.
    0 comments No comments

  4. Gail 30 Reputation points
    2026-02-28T01:54:45.4933333+00:00

    So I tried to post this earlier but I guess it didn’t go through. I searched the number in the email I was advised to call 812.484.9724. It is a T mobile cell phone in Indiana. Can’t remember exactly where now. So this is definitely a scam but very scary that the Microsoft address is legit. I did report to Microsoft.

    2 people found this answer helpful.

  5. J S 5 Reputation points
    2026-03-05T15:42:38.0066667+00:00

    Maybe Microsoft should use their super duper AI technology to detect and stop garbage like this from being sent using their domains. Go figure, they can't do it or are unwilling to bother trying.

    1 person found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.