The behavior described should be treated with caution and not followed until the source is clearly verified.
Key points based on Microsoft guidance:
- Unsolicited sign-in or verification prompts can indicate someone is trying to access an account or that a device/app is misconfigured.
- Microsoft may legitimately ask for verification when signing in or using features that require identity verification, or when signing in from a new device. However, this should normally appear in the context of a sign-in action that was intentionally started.
- Microsoft will not proactively provide unsolicited technical support or ask to perform unexpected actions outside a normal sign-in flow.
- Any message that appears to “take over” the screen or pressures to act within a time limit should be treated with suspicion, especially if it appears at startup without intentionally starting a Microsoft sign-in.
- If unsure whether a prompt is genuine, do not follow the instructions in the message.
- Do not type codes or follow links from unexpected prompts.
- Instead, open a browser manually and go directly to https://account.microsoft.com or https://account.live.com by typing the address, then sign in and check account activity.
- If any verification codes or messages are received that were not requested, this may indicate someone else is trying to use the account.
- Follow Microsoft’s guidance to help keep the account secure and review recent activity.
- Tech support scams and fake security prompts are common.
- Real Microsoft error or warning messages do not include phone numbers to call.
- Microsoft and other legitimate companies do not cold call or pop up unsolicited support instructions.
Recommended actions:
- Continue dismissing the prompt as done (e.g., via Task Manager) rather than entering the code or visiting the URL from the prompt.
- Manually sign in to the Microsoft account via https://account.microsoft.com or https://account.live.com and:
- Review recent sign-in activity.
- Change the account password.
- Ensure two-step verification is enabled and recovery info (phone/email) is correct.
- Run a full security scan on the device using Windows Security to ensure there is no malware causing fake prompts.
- If any message, email, or call asks for payment, remote access, or sensitive information in connection with these prompts, treat it as a scam and do not engage.
If the prompt persists and cannot be clearly tied to a legitimate sign-in scenario (for example, a known Microsoft app or device enrollment that was intentionally configured), contact trusted support channels directly rather than using any contact details or links shown in the prompt.
References: