Multiple calls from unknown numbers

Question

Multiple calls from unknown numbers a total of 15 over 2 minutes, the saying someone may me trying to change my log in password, then asking me to press 1 if this was not me, then sending me a verification code which I did not enter. is this legitimate?

Answer 1

Hi Dennis,

These are spam calls. Block the #'s calling

you. Do not press any #'s tttttthey ask you to.

Answer 2

Those calls are not legitimate and should be treated as a scam/phishing attempt.

Key points based on Microsoft’s guidance about genuine security messages:

1. Microsoft does not make unsolicited phone calls to provide technical support or to ask to approve/deny sign‑in attempts by “pressing 1” on a call.
2. Genuine Microsoft verification codes are sent by:
   • SMS from short code 69525 or sender “Microsoft”, or
   • Email from @accountprotection.microsoft.com and are only triggered when actively signing in or using a feature that requires verification.
3. If a verification code or sign‑in prompt is received that was not requested, Microsoft states this usually means:
   • Someone is trying to access the account, or
   • Someone mistyped a phone/email when signing in, or
   • A previously requested code/prompt was delayed. In all such cases, the instruction is do not respond to unrequested codes or prompts.
4. Microsoft’s guidance if unsure whether a message is genuine:
   • Do not click links or follow instructions from the message/call.
   • Go directly to https://account.microsoft.com or https://account.live.com by typing the address into the browser to review and secure the account.

Recommended actions:

1. Do not press any keys or share any codes on such calls; hang up immediately.
2. If any verification codes were received that were not requested, ignore them and do not share them with anyone.
3. Sign in directly to the Microsoft account via a trusted browser and:
   • Review Recent activity for unusual sign‑ins.
   • Change the account password.
   • Ensure security info (phone, email, authenticator) is correct and remove anything unfamiliar.
4. Consider enabling stronger sign‑in methods (for example, Microsoft Authenticator or other passwordless options) as described in the passwordless guidance linked from the verification‑code troubleshooting articles.

---

References:

• Why is Microsoft texting me?
• Using Outlook mobile to sign in
• Common problems with two-step verification for a work or school account
• Troubleshoot Microsoft verification code issues
• What happens if there's an unusual sign-in to your account
• Can I trust email from the Microsoft account team?