Unrequested pass code

Question

Pass code sent to gmail account that was not requested.

Answer 1

Hi,

If you are getting a single use code that you did not request, it could mean that someone accidentally entered your email address, or someone may be trying to access your Microsoft account.

If you did not request the code yourself, do not share or use the code. The good thing is that receiving the code alone does not mean your account has been accessed.

To help secure your account, I suggest the following:

• Change your Microsoft account password immediately and make sure it is strong and unique.

• Review your recent sign in activity here to check for unfamiliar login attempts: https://account.microsoft.com/security

• If you notice unfamiliar sign in attempts from unknown locations or devices, choose the option that says “This wasn’t me” on the activity page to report the activity to Microsoft.

As an additional security measure, please see “How to help keep your Microsoft account secure.”: https://support.microsoft.com/account-billing/how-to-help-keep-your-microsoft-account-secure-628538c2-7006-33bb-5ef4-c917657362b9

Answer 2

Do not use or enter the pass code that was not requested.

A verification code or “pass code” sent to a Gmail address without being requested typically means one of the following:

1. Someone is trying to access the account.
2. Someone mistyped the Gmail address when trying to sign in.
3. Delivery of a previously requested code was delayed.

Actions to take:

1. Ignore and delete the message if the code was not requested.
2. Do not click any links or reply to the message.
3. If the email claims to be from Microsoft, verify it is legitimate by checking that the sender domain is @accountprotection.microsoft.com and that the account being referenced is actually owned.
4. If there is any suspicion that someone is trying to access the account, immediately review and update security settings (password, recovery email/phone, and two-step verification) on the Microsoft account and on the Gmail account.
5. Consider enabling passwordless sign-in methods (such as Microsoft Authenticator, Windows Hello, or security keys) to reduce reliance on codes and improve security.

The account remains safe as long as the unrequested code is not used.

---

References:

• Common problems with two-step verification for a work or school account
• Can I trust email from the Microsoft account team?
• Using Outlook mobile to sign in