single use code request

Question

I have received an email stating i requested a single use code to use with my microsoft account. I did not make a request for a code. What do i do next?

Answer 1

Do not use the code or reply to the message.

1. Ignore and delete any verification or single-use code email that was not requested.
2. Check that the email is genuinely from Microsoft:
   • The sender domain for legitimate Microsoft account security emails is @accountprotection.microsoft.com.
   • If the domain is different, treat it as phishing and delete it.
3. Even if the email is genuine, it usually means either:
   • Someone else is trying to sign in to the account using the email/phone by mistake, or
   • Someone is trying to access the account without permission. Without the code, they cannot complete sign-in.
4. To improve security:
   • Sign in to the Microsoft account security page and review security info and recent activity.
   • Consider enabling or switching to passwordless sign-in methods such as Microsoft Authenticator, Windows Hello, SMS/Email codes, or a physical security key to better protect the account.

Do not respond to any codes that were not requested. As long as the code is not used, the account remains safe.

---

References:

• Troubleshoot Microsoft verification code issues
• Common problems with two-step verification for a work or school account
• Can I trust email from the Microsoft account team?