Unrequested One Time Passcodes

Question

What is the official Microsoft email address that you receive one time passcodes from?

I am receiving unrequested passcodes from:

******@accountprotection.microsoft.com

and would like to know if this a genuine Microsoft email address, or a bogus one that I can ,block and report'

Answer 1

The address ******@accountprotection.microsoft.com is a genuine Microsoft domain used for Microsoft account security notifications, including verification and one-time passcodes. Emails from the Microsoft account team that come from @accountprotection.microsoft.com can be trusted.

If these codes are unrequested, do not use or reply to them. They may indicate someone is trying to access the account or that someone mistyped an email/phone number. The account remains safe as long as the codes are not shared or entered. To reduce such incidents and improve security, consider enabling passwordless sign-in methods such as Microsoft Authenticator, Windows Hello, SMS/Email codes, or security keys.

---

References:

• Can I trust email from the Microsoft account team?
• Troubleshoot Microsoft verification code issues
• What happens if there's an unusual sign-in to your account