email with single use code

Question

I received an email with a single use code, which I did not request for. Email timed at midnight hour, when I was asleep.

Answer 1

Hi, I'm John! I will help you with this.

If you did not request the code, do not use it and do not click any links in the email.

Can you share the sender email address so we can check if it is really from Microsoft? Please hide part of the address for privacy.

Sometimes this can happen if someone accidentally entered your email while trying to sign in, or someone knows your account credentials and is trying to access the account. Have you already changed the password for that account?

---

If you haven't already, I would recommend checking the recent activity page and changing the password if you have not done so already. Also make sure two-step verification is enabled.

You can check account activity here: https://account.live.com/Activity

"How to help keep your Microsoft account secure" https://support.microsoft.com/account-billing/how-to-help-keep-your-microsoft-account-secure-628538c2-7006-33bb-5ef4-c917657362b9

---

Click "Add comment" to let me know.

Answer 2

If an email with a single-use (verification) code was not requested, do not use the code or reply to the message.

Possible reasons this happened:

1. Someone is trying to access the account using the email or phone number.
2. Someone mistyped their own email/phone and accidentally entered this one.
3. A delayed delivery of a code that was requested earlier.

Recommended actions:

1. Ignore the code
   • Do not enter the code anywhere or reply to the email.
   • Delete the message after checking the points below.
2. Check that the message is genuine
   • If it is from the Microsoft account team, valid verification codes are sent from an address ending in @accountprotection.microsoft.com.
   • If unsure, do not click any links. Instead, manually go to https://account.microsoft.com or https://account.live.com in a browser and sign in there.
3. Secure the account
   • Sign in to the Microsoft account and review security info and recent activity.
   • Ensure two-step verification or other strong sign-in methods (such as Microsoft Authenticator, Windows Hello, or a security key) are enabled.
   • Consider going passwordless to reduce the risk of password-based attacks. See Go passwordless guidance linked in the references.
4. If unrequested codes continue
   • Continue to ignore them; without the code, the account remains safe.
   • Review and update security info (phone numbers, alternate emails) and remove anything not recognized.

If at any point sign-in or codes stop working as expected, use the troubleshooting steps for verification codes and, if needed, the sign-in helper or Contact Support options in the references.

---

References:

• Can I trust email from the Microsoft account team?
• Why is Microsoft texting me?
• Troubleshoot Microsoft verification code issues
• Common problems with two-step verification for a work or school account