Free check · Microsoft
Is this Microsoft email real?
Paste the sender’s address. We check it against what Microsoft publishes about its own email, and flag look-alike domains and free mailboxes pretending to be Microsoft.
Sends from
- account-security-noreply@accountprotection.microsoft.com
Never asks
Type account.microsoft.com/security into your browser yourself, select Review activity, and look for the sign-in the email describes. If you don’t recognise it, choose This wasn’t me or Secure your account.
Report it
In Outlook.com, select the message, then Report → Report phishing.
What fake Microsoft senders look like
Made-up examples of the tricks scammers use. Tap one to see what the checker says.
From Microsoft’s own help pages · checked October 2026
What Microsoft says about its email
Microsoft
microsoft.com · microsoftonline.com · office.com · +7
Sends from
-
account-security-noreply@accountprotection.microsoft.comMicrosoft account security alerts, such as unusual sign-in activity
How to check
- Type account.microsoft.com/security into your browser yourself, select Review activity, and look for the sign-in the email describes. If you don’t recognise it, choose This wasn’t me or Secure your account.
- Outlook shows a “?” in place of the sender’s photo when it can’t verify who sent a message. Microsoft notes that not every message that fails this check is malicious, but a familiar sender suddenly showing “?” can be a sign of spoofing.
Report it
- In Outlook.com, select the message, then Report → Report phishing.
Sources: Microsoft Support: What happens if there’s an unusual sign-in to your account · Microsoft Support: Phishing and suspicious behavior in Outlook
Questions
What email address does Microsoft use?
Microsoft documents these: account-security-noreply@accountprotection.microsoft.com (Microsoft account security alerts, such as unusual sign-in activity).
Is an email from a Microsoft address always real?
No. The From address can be forged. Whether a message really came from Microsoft’s domain is shown by the DMARC result in its headers — paste them into our Email Header Analyzer to check.
How do I report a fake Microsoft email?
In Outlook.com, select the message, then Report → Report phishing.
How do I check an email from Microsoft safely?
Type account.microsoft.com/security into your browser yourself, select Review activity, and look for the sign-in the email describes. If you don’t recognise it, choose This wasn’t me or Secure your account. Outlook shows a “?” in place of the sender’s photo when it can’t verify who sent a message. Microsoft notes that not every message that fails this check is malicious, but a familiar sender suddenly showing “?” can be a sign of spoofing.
Sources
Check an email from another company
More free tools
Check something else
Email Signature Generator →
A professional signature for Gmail and Outlook.
Gmail Search Builder →
Find any email by sender, date, size or attachment.
Outlook Search Builder →
Find any email in Outlook or Outlook.com.
SPF, DKIM & DMARC Checker →
Is the domain’s email authentication set up?
MX Lookup →
Which servers receive mail for a domain.
SPF Record Generator →
Build a valid SPF record for your domain.
DMARC Record Generator →
Create the DMARC policy to publish.
DMARC Report Analyzer →
See who sends as your domain, from your DMARC reports.
Email Header Analyzer →
Trace a message and check who really sent it.
Email Settings Finder →
IMAP, POP3 and SMTP settings for any address.