is the website www.aka.ms/armemail legit

Question

I received this email:

NOTE: This is a degraded email experience. That means the formatting may be off or details could be missing. For more information on the degraded email experience, [www.aka.ms/armemail]read here.

 Your Azure Monitor alert was resolved

Azure monitor alert rule ResponseSlow-4369891-A6 was resolved for locker4369891 at March 18, 2026 12:10 UTC.

Answer 1

Hi,

Is there text in the messages asking you to call a phone number, and/or mentioning substantial amount (e.g. $349, $499)? If yes, DO NOT call the number(s). If no, please post the contents of the email as a comment (remove your email address first) and I will see if it matches the scam pattern or not.

Recently (past few weeks) there have been malicious Azure Monitor Alert messages going out and there is chance that is what you are receiving. DO NOT call any phone number(s) in the email messages.

It appears what is happening is bad actors get access to an Azure subscription, set up Alerts with potential victim's email address (your email) set as recipient, then trigger alert. In the text of the alert they mention things like Fraud Prevention System, Windows Defender, some substantial $ amount, potentially unauthorized charge, account suspension, Fraud Resolution Hotline, etc., and their goal is for you to call a phone number.

DO NOT call any phone number in the email. They want you to call them so they can scam you.

Currently there isn't a good way to make them stop. You could create an email rule to move them to separate folder. I don't recommend blocking them permanently because they are from real Microsoft email address. The text of the alert is written by the scammers.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP

Answer 2

Hello Loire Cooking,

Thank you for posting your query on Microsoft Q&A platform.

We are from Microsoft and by investigating the screenshot of mail we see that you’re describing closely aligns with a known scam pattern involving Azure alert emails.

In these cases, attackers first gain access to an Azure subscription and then deliberately configure alert rules to send notifications to external email addresses (such as yours). They subsequently trigger those alerts. While the emails are technically generated by Azure, the alert message content itself is authored by the attackers.

These emails typically include alarming language such as:

• references to a “Fraud Prevention System” or “Windows Defender,”
• warnings about large, suspicious charges,
• threats of account suspension, and
• a so‑called “Fraud Resolution” or “Support Hotline” phone number.

The objective is to pressure recipients into calling that number, where the scam continues.

Important guidance:

• Do not call any phone number mentioned in the email.
• Do not click any links included in the message.
• Simply delete the email.

It’s worth noting that these messages can appear convincing because they are sent from legitimate Microsoft email infrastructure. However, Microsoft does not include phone numbers or urgent call‑to‑action language like this in genuine Azure alert notifications.

Reference: https://malwaretips.com/blogs/microsoft-azure-alert-was-triggered-scam-exposed-investigation/

If the provided information helped, kindly consider marking the answer as "Accepted" and "Upvote" it. This helps other community members who may encounter a similar issue in the future.

If you have any queries, please feel free to reach out us.

Answer 3

Issue resolved; email deleted without opening links. Thanks!