Azure Messages

Question

I keep getting back to messages about Azure - Your Azure Monitor alert was resolved Your Azure Monitor alert was triggered. I don't have Azure

Answer 1

These messages are Azure Monitor alert notifications that are sent when an alert is triggered or resolved on an Azure subscription that has alerts configured.

If Azure services are not intentionally in use, the most likely causes are:

1. An Azure subscription exists and is associated with the email address receiving the messages (for example, created in the past or via another Microsoft service), and someone configured Azure Monitor alerts on that subscription.
2. The email address was added to an Azure Monitor action group in someone else’s subscription (for example, by an administrator or colleague) so it receives alert notifications.

To stop receiving these messages, the owner or administrator of the Azure subscription must remove the email address from the relevant Azure Monitor action groups or disable/delete the alert rules that are firing. If access to the Azure portal is not available or the subscription truly does not belong to the mailbox owner, this should be escalated via Microsoft account/Azure support so they can review the account and subscription association.

The troubleshooting guidance for Azure Monitor alerts focuses on cases where alerts are expected but notifications are missing or misconfigured. In this case, the alerts and notifications are working as designed; the remediation is to remove the email from action groups or address the underlying subscription/account configuration.

---

References:

• Troubleshooting problems in Azure Monitor alerts

Answer 2

Hi Jo Ann,

Recently there have been malicious Azure Monitor Alert messages going out and there is good chance that is what you are receiving. DO NOT call any phone number(s) in the email messages.

It appears what is happening is bad actors get access to an Azure subscription, set up Alerts with potential victim's email address (your email) set as recipient, then trigger alert. In the text of the alert they mention things like Fraud Prevention System, Windows Defender, some substantial $ amount, account suspension, Fraud Resolution Hotline, etc., and their goal is for you to call a phone number.

DO NOT call any phone number in the email and DO NOT click on any links. They want you to call them so they can scam you.

NOTE: In a sense, the emails are "legit" in that they are coming from a real Microsoft email address, however, the text contained in the alert emails are written by scammers trying to trick you into calling them.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP