Hi, I'm John! I will help you with this.
The official Microsoft address for account security notices is:
Reference: "Can I trust email from the Microsoft account team?" https://support.microsoft.com/account-billing/can-i-trust-email-from-the-microsoft-account-team-685fd302-f52f-1a9f-cc13-065dec46fe25
To be safe, I recommend:
- Don’t click on any links or download anything from that email.
- Go directly to the Microsoft Account Activity page https://account.live.com/Activity and check your recent sign-in activity. If there’s nothing unusual there, then the message most likely isn’t from Microsoft.
- If you didn’t request any changes and the email is not officially from Microsoft, it’s a good idea to ignore or report the email as phishing.