credit card security

Question

To list a new credit card for Microsoft 365, Microsoft wants me to upload the card and photo ID. My bank says to NEVER do this.

Answer 1

Do not upload a card image or photo ID in response to an email or unexpected prompt.

For Microsoft account payments, the supported path in the provided guidance is to sign in to the Payment options page and add the card details by selecting Add a new payment method. The guidance says to enter the card details correctly; it does not say to upload a card image or ID.

If the request came from an email saying payment must be updated or the account will be suspended, treat it as suspicious. A similar Microsoft Q&A case states that if there is no actual subscription problem, this is likely a phishing attempt and should be reported. Another similar case notes that real Microsoft billing emails direct sign-in at account.microsoft.com rather than asking to update payment through an email link.

Recommended steps:

1. Do not send the card photo or ID.
2. Open the Microsoft account billing page directly and check whether the subscription actually shows a payment problem.
3. If needed, add a new payment method from the Payment options page.
4. If the card was exposed anywhere suspicious, contact the bank, dispute any bad transactions, and request a replacement card.
5. Before entering payment details online, verify the site uses https and shows the padlock, and make sure it is the correct Microsoft site.

If the card has already been shared, banks and card issuers generally recommend canceling and replacing the card, and challenging fraudulent transactions quickly.

---

• Add a new bank or credit card to your Microsoft account
• CLOUD payment request - Microsoft Q&A emails stating bank card needs to be updated. Asking for bank information that should not be needed. Microsoft pulls from my account every month without problem. Is this email legitimate?
• Phishing attempt for 365 family - Microsoft Q&A "Microsoft" sent me what looks very much like an official email regarding my mothers account.
• What to do if your credit or debit card info is stolen
• Making safer financial transactions online