fraud email

Question

Received an email from Microsoft Corporation in Western Australia saying I requested a single use code for my accounts.

I never requested such a code (this number is shown on the email). Should I consider this amail as junk? I have already moved this email to the junk folder.

Answer 1

Treat the message as suspicious and keep it in Junk.

For legitimate Microsoft account verification codes:

• Email verification codes are sent only to the primary alias or a security email that was explicitly added as a way to verify sign-in.
• Valid verification-code emails come from an @accountprotection.microsoft.com address.

If the message does not come from @accountprotection.microsoft.com, or it claims a code was requested when no sign-in or security action was performed, it should be treated as junk/phishing. Do not click any links, open attachments, or reply.

As an extra safety step, add @accountprotection.microsoft.com to the safe senders list so real verification emails go to the Inbox, and continue to let suspicious ones go to Junk.

---

References:

• Troubleshoot Microsoft verification code issues
• Options > Junk Email
• Block or allow (junk email settings)