A legitimate email from Microsoft regarding your account always comes from domains ending in @accountprotection.microsoft.com
If it is coming from a different address, please be careful as it can be phishing scam. Don't click on the link in the email, instead, always check your account directly via https://account.live.com > Microsoft storage. If it looks good there you have nothing to worry about.