Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
The domains listed as used by Microsoft support are:
-
microsoft.com -
microsoftsupport.com -
mail.support.microsoft.com -
office365support.com -
techsupport.microsoft.com
The email address ******@mail.support.microsoft.com matches one of the documented Microsoft support domains, and the addresses ******@office365support.com also match another documented Microsoft support domain.
For Microsoft account notifications (such as verification codes), Microsoft also uses @accountprotection.microsoft.com.
Even when a domain looks correct, standard phishing precautions still apply:
- Verify the sender domain exactly matches one of the trusted domains above (watch for subtle misspellings like
micros0ft.comor extra words/characters). - In Outlook, check for any warning banners such as “we could not verify the sender,” or a
?in the sender image, which indicate the sender could not be authenticated. - Hover over any links (without clicking) to ensure they go to legitimate Microsoft addresses and not unrelated or numeric URLs.
- Do not provide passwords, financial data, or other sensitive information by email.
If the message still seems suspicious, do not reply or click links/attachments. Instead, go directly to Microsoft’s official support site or account portal in a new browser window and verify any case or billing information there. Suspicious messages can be reported as phishing using the guidance in Protect yourself from phishing.
References: