Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Is microsoft notificationmail.microsoft.com a Scam?

Emails from microsoft@notificationmail.microsoft.com can be legitimate Microsoft notifications, but they are frequently spoofed by scammers. Attackers use this address to send phishing emails regarding storage, account security, or fake OneDrive activity to steal credentials or install malware. Always verify directly through the Microsoft official website instead of clicking links.

Signs It Is a Scam

  • Urgency & Fear: Threats to lock accounts or delete storage within 24 hours.
  • Generic Greeting: Phrases like "Dear User" instead of your name.
  • Suspicious Links/Attachments: Hover over links before clicking to ensure they lead to microsoft.com.
  • Hybrid Scam: Sometimes legitimate-looking notifications contain a fake phone number for "support".

Protect Yourself

  • Do not click links or call phone numbers provided in the email.
  • Verify directly: Go to account.microsoft.com directly to check your storage or security alerts.
  • Check the Sender Domain: While the domain might appear as notificationmail.microsoft.com, look for discrepancies in the full email header.
  • Report Phishing: Use your email client's option to report the message as phishing or spam.
waiting