Microsoft email scam: is that account alert real?
Editorially reviewed · Last updated June 16, 2026
Yes — this is a scam. Microsoft never sends account alerts from "micros0ft-security.info".
Other versions you might get: A fake "your password expires today," an Office 365 storage-full warning, or a "your subscription failed — update payment" notice.
What to do right now
- Don't click the link or button, and don't enter your password anywhere it sends you.
- Check your real account — type microsoft.com yourself or open the app. Any genuine alert will be there.
- Report it. In Outlook, use the Report > Report phishing button, or forward it to phish@office365.microsoft.com, then file at reportfraud.ftc.gov.
- Delete it and mark it as phishing.
- If you already entered your password, change it now at microsoft.com, sign out of all devices, and turn on two-step verification.
How to make sure it never bites you
Phishing reaches you because your email address sits on breached lists, so these alerts keep coming. If you typed your password into the fake page, change it and any account that shares it, then turn on two-step verification. Reduce the blast radius — see how to lock down your accounts.
Help protect someone else
Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.