In short
Most common fake: Unexpected calls from fake Microsoft technicians who want remote access to your computer.
Safest check: Treat any pop-up or error message that shows a phone number as a scam, genuine Microsoft errors never include one.
Where to report it: Report tech support scams to Microsoft at www.microsoft.com/reportascam.
What Microsoft says
Microsoft says it does not make unsolicited calls or send unsolicited emails asking for personal or financial information, and its real error messages never include a phone number. It also says it will never ask you to pay for support with cryptocurrency or gift cards. Source: Microsoft
Common fake Microsoft messages
These are the 5 shapes a fake Microsoft message usually takes. They are listed in the order we see them most often, and none of them is something Microsoft itself does.
- Unexpected calls from fake Microsoft technicians who want remote access to your computer
- Browser pop-ups or fake blue screen errors telling you to call a support number
- Emails urging you to click, call or open an attachment immediately
- Links to look alike addresses with small misspellings of microsoft.com
- Requests to pay for support with gift cards or cryptocurrency
Microsoft's real web addresses
Genuine Microsoft links and emails use these domains. Look at the part just before the first single slash: microsoft.com is real, but microsoft-support-center.com or microsoft.com.account-check.top are not.
- microsoft.com
- accountprotection.microsoft.com
Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.
How to check a Microsoft message safely
- Treat any pop-up or error message that shows a phone number as a scam, genuine Microsoft errors never include one
- Microsoft account emails from an address ending in @accountprotection.microsoft.com are genuine, and you can check the message headers to confirm
- Hover over links without clicking to see the real web address
- Get help only through Microsoft's official support website rather than numbers in pop-ups, calls or emails
How to report a fake Microsoft message
- Report tech support scams to Microsoft at www.microsoft.com/reportascam. Official details on support.microsoft.com
- In Outlook, select the message and choose Report, then Report phishing. From other email apps, send the phishing email as an attachment to phish@office365.microsoft.com. Official details on support.microsoft.com
- Report a suspicious website with Microsoft's report unsafe site tool at microsoft.com/wdsi/support/report-unsafe-site. Official details on support.microsoft.com
Also report it to the official fraud service in your country. See the worldwide list.
If you clicked, paid or shared details
Act quickly. It makes a difference.
- If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
- If you entered a password, change it at microsoft.com, typed into your browser yourself, and turn on two-step verification. Do not use any link from the message.
- Expect follow-up calls or messages pretending to help, sometimes claiming to be from Microsoft security. Never share one-time codes and never move money to a "safe account".
- Report tech support scams to Microsoft at www.microsoft.com/reportascam, then delete the message.
More help: Tech support and remote-access scams and what to do after a scam.
How to protect yourself next time
Keep security software with web protection on your devices
It blocks many known scam and malware websites and warns about dangerous apps. That matters most if you installed an app or "support" tool someone asked you to.
Free: Keep your phone and browser updated, and leave Google Play Protect or Microsoft Defender switched on. Both are free.
- Bitdefender Partner link Security suite for phone and computer with web and scam protection.
Use a password manager
It only fills in your password on the real website, so a look-alike login page gets nothing. It also makes a different password for every account, so one leak doesn't open the rest.
Free: Bitwarden has a free plan, and even the password manager built into your phone or browser beats reusing one password everywhere.
- NordPass Partner link Password manager with a free plan and a family plan for up to six people.
Compare the tools that help, and what each costs
Links marked Partner link may earn us a commission, at no cost to you. It never changes our advice, and the free option always comes first. Affiliate disclosure.
Questions people ask
Does Microsoft send messages asking for payment or personal details?
Microsoft says it does not make unsolicited calls or send unsolicited emails asking for personal or financial information, and its real error messages never include a phone number. It also says it will never ask you to pay for support with cryptocurrency or gift cards.
How can I check if a Microsoft message is real?
Treat any pop-up or error message that shows a phone number as a scam, genuine Microsoft errors never include one. Microsoft account emails from an address ending in @accountprotection.microsoft.com are genuine, and you can check the message headers to confirm. Hover over links without clicking to see the real web address. Get help only through Microsoft's official support website rather than numbers in pop-ups, calls or emails.
How do I report a fake Microsoft message?
Report tech support scams to Microsoft at www.microsoft.com/reportascam. In Outlook, select the message and choose Report, then Report phishing. From other email apps, send the phishing email as an attachment to phish@office365.microsoft.com. Report a suspicious website with Microsoft's report unsafe site tool at microsoft.com/wdsi/support/report-unsafe-site.
I clicked a link in a fake Microsoft message but did not enter anything. Am I at risk?
Opening a link is far less serious than filling one in. Close it, and if you need your account, reach it by typing microsoft.com yourself. Clicking does tell the sender your number is live, so expect more messages for a while: report tech support scams to microsoft at www.microsoft.com/reportascam.
Have you had this one?
Tell other people what the message said and how it reached you. It helps someone recognise it before they tap.
No stories yet. Yours could be the one that warns someone.
Official sources and further reading
We check our pages against official advice from the organisations themselves and from government agencies.
- Protect yourself from tech support scams (Microsoft)
- Protect yourself from phishing (Microsoft)
- Can I trust email from the Microsoft account team? (Microsoft)