What is the official email address from Microsoft.? I want to know this so that I can verify official emails from Microsoft.

Question

I want to know the official email address for Microsoft so that I can verify emails from Microsoft. I think I received a scam email today stating that my payment failed. However, I did have an old debit card on file. I did add my new card here on this site in the Payment section. But when I logged on my account said I had a 0 balance.

Answer 1

Hi, @james darrigan

Microsoft does not use just one email address for all notifications. For Microsoft account security messages, Microsoft confirms that emails from the @accountprotection.microsoft.com domain are legitimate. However, the sender address alone should not be used to verify a billing email.

Since the email says your payment failed, do not click any links or call any phone number in that email.

Instead, sign in directly to your Microsoft account and check:

• https://account.microsoft.com/services confirm whether Microsoft 365 shows as Active and check the next billing date.
• https://account.microsoft.com/billing/orders check whether there is a failed or recent charge. Adjust the date range to include the expected payment date.

Also, a Microsoft account balance showing 0 does not necessarily mean you owe $0. That balance can refer to money stored in your Microsoft account.

---

To help narrow this down:

1. What is the full sender email address of the message you received? You can post the address here, but do not post any personal information.
2. Under https://account.microsoft.com/services does your Microsoft 365 subscription show Active, Expired, or Past due?

---

Click "Add comment" to let me know.

Thanks!

Answer 2

There is no single official Microsoft email address for all messages. Microsoft uses different domains depending on the type of email.

For Microsoft account security emails, the official domain is:

• @accountprotection.microsoft.com

Microsoft support may also send email from these domains:

• microsoft.com
• microsoftsupport.com
• mail.support.microsoft.com
• office365support.com
• techsupport.microsoft.com

For personal OneDrive emails, these domains are listed as genuine Microsoft communications:

• @mail.onedrive.com
• @notificationmail.microsoft.com
• @infomail.microsoft.com

To verify whether an email is legitimate:

1. Check the sender domain exactly. Be cautious of lookalike or misspelled domains.
2. If the message claims to be from Microsoft but comes from another domain, it is likely phishing.
3. Do not click links or open attachments in suspicious messages.
4. Hover over links to inspect the real destination before clicking.
5. If Outlook shows a banner saying the sender could not be verified, treat the message cautiously.
6. For account verification codes, valid emails come from @accountprotection.microsoft.com and may also be found in Junk Email.

For the payment-failed message described, the safest check is to verify the account status directly in the Microsoft account instead of trusting the email. If the account shows a 0 balance, that does not match a payment-due message by itself.

---

References:

• Can I trust email from the Microsoft account team?
• How to determine if an email from Microsoft support is genuine
• Why did I get a message saying my files will be erased?
• Protect yourself from phishing
• Troubleshoot Microsoft verification code issues