Constant Azure Emails

Question

Hi I keep getting constant emails sating Azure: Activated severity: 2 payment successfully processed - alert triggered then after a deactivated email saying it is resolved. What is this? And how do I make it stop?

Answer 1

Hello

This round of scam is really taking off. Many users seem to have received similar ones. The email address itself is legitimate, but not the email content itself, as the scammer is using Microsoft's legitimate notification delivery service to deliver content they crafted.

I would suggest that you create a rule to delete them. Do this ONLY if you don't have any Azure products. - these are commercial products.

Go to www.outlook.com > Settings > Mail > Rules

Answer 2

Those emails are Azure alert notifications that have been configured to fire when a billing or payment-related condition is met, and then send a follow-up email when the alert is resolved. Each “Activated severity: 2 payment successfully processed – alert triggered” message is the alert firing; the “deactivated/resolved” message is the same alert clearing.

To stop or reduce these emails, adjust or remove the alert configuration in Azure rather than in Outlook:

1. Identify which alert is sending the emails
   • Open the Azure portal and go to the subscription or resource mentioned in the email subject/body.
   • Check the alert details or action group referenced in the email (for example, an Azure Monitor alert, Service Health alert, or a billing-related alert).
2. Modify or disable the alert rule
   • For Azure Monitor–based alerts, open Azure Monitor → Alerts → Alert rules.
   • Find the rule that matches the email text (for example, a billing or payment alert with severity 2).
   • Either:
     • Disable the alert rule, or
     • Edit its condition so it doesn’t trigger so frequently.
3. Change or remove email recipients
   • In the alert rule, open the associated action group.
   • Remove the email address from the action group, or replace it with a distribution list that is monitored less frequently.
4. Check for other built-in notification mechanisms
   • Some services (for example, Azure Backup, Service Health, or smart detection in Application Insights) have their own built-in email notification settings. If the wording of the emails matches one of those services, open that service in the portal and either disable notifications or change the email list.

If the emails are security or subscription-critical notifications sent to the subscription admin/owner, they are designed to ensure that a contactable email exists and may not be fully suppressible without changing the admin/owner contact to a different address.

---

References:

• Troubleshooting problems in Azure Monitor alerts
• Smart detection - Performance Anomalies
• Security notifications
• Backup Classic Alerts
• Resolve a past-due balance for your pay-as-you-go Azure subscription
• Not getting emails from subscriptions or notifications
• Payment Services Directive 2 and Strong Customer Authentication
• Why did I get this email