I got a mail about unusual login activity

Question

hi got the mail below but th emai lis not correct
--------
ad********@outlook.com.

Microsoft account team ******@accountprotection.microsoft.com

Unsubscribe

02:05 (7 hours ago)

to me

Microsoft account
Microsoft account
Unusual sign-in activity
We detected something unusual about a recent sign-in to the Microsoft account ad********@outlook.com.
Sign-in details
Country/region: United States
IP address: 98.49.175.12
Date: 25/03/2026 02:05 (GMT)
Platform: -
Browser: -
Please go to your recent activity page to let us know whether or not this was you. If this wasn't you, we'll help you secure your account. If this was you, we'll trust similar activity in the future.

Review recent activity
Review recent activity

To opt out or change where you receive security notifications, click here.
Thanks,
The Microsoft account team

Privacy Statement

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

Answer 1

That Email is a genuine Email from Microsoft, it is not a scam.

Log into your Microsoft account on this link to check the recent activity on your account, do you see any strange login attempts from locations you do not recognize, and if so, are the login attempts indicated as successful?

https://account.live.com/Activity

Answer 2

The message shown is the standard “unusual sign-in activity” notification Microsoft sends when a sign-in from a new location, device, or app is detected. Legitimate security alerts for Microsoft accounts are sent from the Microsoft account team at an address ending in @accountprotection.microsoft.com, which matches what is shown.

However, the email alone should never be trusted as proof of compromise. The correct next step is to verify activity directly in the account, not via the email content:

1. Open a browser and manually go to the Recent activity page by entering https://account.live.com/Activity or by signing in to the Microsoft account dashboard and navigating to Security → Recent activity.
2. Review the last 30 days of sign-ins. Check:
   • Date and time
   • Country/region and IP address
   • Device, platform, browser, and app
3. If the sign-in in the email appears there and is not recognized, mark it as This wasn’t me on the Recent activity page. Follow the prompts to secure the account.
4. If there is any suspicion that someone else may have accessed the account, immediately:
   • Change the account password.
   • Update security info (phone number, alternate email) on the Security settings / Security basics pages.
   • Remove any devices marked as trusted.

If the email address in the body of the message is not the actual Microsoft account in use, still sign in to the correct Microsoft account and check Recent activity as above. Do not click any links in the email if there is any doubt; always navigate manually.

If more help is needed securing or recovering the account, use the guidance under “Get more help protecting your Microsoft account.”

---

References:

• Check the recent sign-in activity for your Microsoft account
• What happens if there's an unusual sign-in to your account
• Help protect your Outlook.com email account