Microsoft Azure Email Scam

Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Microsoft Azure Email Scam

Microsoft Azure email scams are phishing attempts designed to steal credentials or install malware by impersonating Microsoft support or security teams. Common tactics include fake security alerts, account suspension notices, or urgent requests to click links, often sent from non-Microsoft domains. Never click links, provide passwords, or reply to suspicious emails.

Warning Signs

Suspicious Sender Domain: Emails not from official domains like @microsoft.com, @communication.microsoft.com, or @accountprotection.microsoft.com.
Urgent/Threatening Language: Claims that your subscription or developer environment will be deleted, demanding immediate action.
Generic Greetings: Uses "Dear user" or "Customer" rather than your name.
Hover-to-Reveal Links: Hovering over links shows URLs directing to non-Microsoft or suspicious sites.
Unsolicited Requests: Microsoft will never call or email you to ask for passwords or financial information.

Received a Suspicious Email?

Do not click links or open attachments: These can install malware or lead to fake login pages.
Verify directly: Go to the official Azure or Microsoft portal directly rather than clicking links in the email.
Report the email: Use the "Report phishing" option in your email client (e.g., Outlook).
Check sender address: Verify if the email is from a legitimate domain, such as microsoft.com or microsoftsupport.com.

There have been reports of phishing scams originating from a legitimate Power BI email address (no-reply-powerbi@microsoft.com), so caution is necessary even if the email appears official.