Email Re Updated Terms from "******@hotmail.com"

Question

I am getting an email from "******@hotmail.com" urging me to acknowledge updated terms of use by tomorrow to continue to access my Outlook mailbox. It asks me to click on a link in a file in Dropbox. Is this legitimate?

Answer 1

The email described is not legitimate and should be treated as a phishing scam.

Key reasons:

1. Sender address
   Legitimate Microsoft account and security notices do not come from personal domains like @hotmail.com. For example, genuine account-related messages use domains such as @accountprotection.microsoft.com or other official Microsoft support domains, not consumer Hotmail addresses.
2. Threatening language and deadline
   Messages that say things like “acknowledge updated terms by tomorrow or lose access to your mailbox” are classic phishing tactics. Microsoft does not terminate Outlook/Hotmail access this way or force acceptance of Terms of Service via urgent email threats.
3. Request to click a link in Dropbox
   Legitimate Microsoft updates and account actions are done directly on Microsoft sites after normal sign-in, not via files hosted on third‑party services like Dropbox. Being asked to open a Dropbox file to “update terms” is a strong phishing indicator.

Recommended actions:

1. Do not click any links or open the Dropbox file.
2. Mark the message as phishing/junk in Outlook and delete it.
3. If any link was clicked or credentials entered, immediately:
   • Change the Microsoft account password.
   • Enable two-factor authentication if not already enabled.
4. For general guidance and to report phishing, follow the steps in:
   • Protect yourself from phishing.

---

References:

• Protect yourself from phishing
• Phishing and suspicious behavior in Outlook
• Help protect your Outlook.com email account
• How to determine if an email from Microsoft support is genuine
• You receive a Microsoft account security alert email message in Office 365 Dedicated/ITAR (vNext)
• Enable or disable security alerts about links and files from suspicious websites
• I keep getting an email saying I need to update Microsoft Tetms of Service & Privacy Policy before July 1 in order to access my mailbox. Is this legit? It wants me to click the link to Update - Microsoft Q&A
• Spam or legit - email from To ******@office.microsoft.com - Microsoft Q&A
• I keep getting emails from Microsoft telling me I need to update/ accept your terms or lose my ability to use my account. Is this a scam? - Microsoft Q&A
• have you been sending messages for me to updae my email - Microsoft Q&A
• I got an email saying my Outlook was outdated and a link to "update" it. Is this from you? - Microsoft Q&A
• Get help with Outlook.com