Use these checks and steps:
- Confirm if the text could be genuine
- Microsoft may text when there is an unusual sign-in or when identity verification is needed.
- Genuine Microsoft security texts can come from short code 69525 or the sender name Microsoft. The short code itself is not the verification code.
- Genuine links in such texts start with aka.ms (for example, aka.ms/alca) and may include part of the account email address.
- Do not trust the text itself
- Do not click any links in the message.
- Do not reply or share any personal information or codes.
- Verify directly with Microsoft
- Open a browser and manually go to https://account.microsoft.com (do not use any link from the text).
- Sign in and go to the Security basics page, then select Review activity.
- On the Recent activity page, check for unusual sign-ins. If an event is listed under Unusual activity, expand it and choose This wasn’t me if it was not yours. If it appears under Recent activity, choose Secure your account.
- If the activity was not yours
- From the Security basics page, select Change password and set a strong, unique password.
- Follow any additional prompts to secure the account.
- If you did not request any code
- Treat the text as a possible phishing attempt or a sign someone is trying to access the account.
- Review the guidance in Troubleshoot verification code issues and How to help keep your Microsoft account secure (linked from the articles below).
If anything looks suspicious or does not match what is shown in the Microsoft account portal, delete the text.
References: