Is this security alert from Microsoft a scam?
No. Microsoft is a legitimate software company, the maker of Windows, Office and Outlook. It also happens to be the name scammers reach for most in tech support fraud: fake virus pop-ups, cold calls from 'Windows Support' and phishing emails all trade on it, and none of them come from Microsoft. The good news: a few quick checks almost always tell a real Microsoft message from a fake.
Genuine Microsoft links lead to microsoft.com, outlook.com, live.com — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real Microsoft message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Microsoft message looks like
Genuine messages from Microsoft link to microsoft.com, outlook.com, live.com. Treat a link to any other address as a warning sign.
- Emails from Microsoft arrive only from @microsoft.com, @outlook.com or @live.com addresses
- Legitimate Microsoft emails never contain urgent demands to call an unknown number or download software
- Genuine Microsoft support is reached through the Microsoft Support app or by typing support.microsoft.com yourself
- Microsoft never initiates contact by phone about a supposed virus or security issue on your computer
- Official Microsoft messages about Windows or Outlook never ask you to grant remote desktop access
What Microsoft will never do
- Call you out of the blue about a virus or security problem on your computer; Microsoft never initiates phone contact about such issues, and no legitimate tech company does
- Display a pop-up with a phone number to call for 'immediate help'
- Ask you to install software or grant remote desktop access to fix a problem it contacted you about first
- Ask for a credit-card number over the phone to remove a virus or 'renew a licence'
- Send emails demanding you verify your account on a domain other than microsoft.com, outlook.com or live.com
Common Microsoft scams
- Cold calls claiming your Windows PC has a virus and directing you to a fake support number
- Browser pop-ups displaying a fake Microsoft logo and urging you to call a supplied number for 'immediate help'
- Emails pretending to be from Outlook or Microsoft that contain a link asking you to 'verify your account' on a lookalike domain
Red flags to watch for
- Any unsolicited phone call from someone claiming to be Microsoft or Windows Support
- Requests to install software, allow remote access, or provide a credit-card number for a supposed Microsoft fix
- Pop-ups or emails that create urgency by claiming your computer will be locked or data lost unless you act now
- Messages directing you to a domain such as microsoft-support-login[.]example or windows-alert[.]example instead of microsoft.com
Microsoft scam examples
These composed examples show how scams impersonating Microsoft typically read, with the tells that give each one away. Compare them against anything you've received.
A caller with a headset background says they are 'a Microsoft-certified technician' and that your Windows licence has been compromised by hackers using your IP address. To fix it you must download a remote access tool, stay on the line while they 'clean' the machine, then pay a one-off support fee by card.
What gives it away:
- Microsoft never initiates contact by phone about a virus or security issue; the call existing at all is the scam
- The remote access tool hands the caller control of your computer, your files and any open banking sessions
- A 'support fee' demanded during a call you never asked for is payment for a repair of nothing
A browser page titled 'Windows Defender Security Alert' freezes the screen: 'Your computer has been locked. Do not restart or your data will be lost. Call the toll-free number on screen to speak with a Microsoft engineer immediately.' A siren plays on loop.
What gives it away:
- Real Windows security warnings never appear as webpages, never play sirens, and never include a phone number
- The 'lock' is only a browser trick; closing the browser ends it, and nothing on the computer is actually at risk
- The number connects to a call centre that will ask for remote access and payment, the standard tech support fraud script
Subject: Your Microsoft 365 renewal could not be processed. Dear user, your annual subscription payment failed. Update your billing information within 48 hours at microsoft365-renewals[.]example or access to your documents and email will be suspended.
What gives it away:
- The link is a lookalike, not microsoft.com; subscription status is checked by signing in at account.microsoft.com yourself
- 'Dear user' is a generic greeting from a company that would know your name if you really were a subscriber
- The 48-hour suspension deadline is pressure engineering, not billing practice
Not sure about your message?
Paste the suspicious Microsoft text or email and get an instant scam verdict, free.
How to verify a message from Microsoft
- Don't call the number, click the link, or install anything the message or caller asks for
- Close the pop-up or hang up, then check your device through Windows Security or by typing support.microsoft.com into your browser yourself
- Sign in at account.microsoft.com using your real outlook.com or live.com address to check any claim about your account or subscription
- Use the Get Help or Microsoft Support app that came with Windows if you genuinely need support
If you have been scammed in Microsoft's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you gave a caller remote access, disconnect the computer from the internet, uninstall any software they had you install, and change your passwords from a different device
- If you shared card details or paid a 'support fee', call your bank immediately to block the card and dispute the charges
- Change your Microsoft account password at account.microsoft.com, plus anywhere else you reused it
- If identity documents were shared or the scammer saw personal files, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below, and forward any scam SMS to 7226 (spells SCAM)
Where to report a scam impersonating Microsoft
Received — or fell for — a message impersonating Microsoft? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest Microsoft scams in 2026
Tech support fraud remains the signature Microsoft scam: a cold call or a screaming browser pop-up insists your Windows PC is infected or locked, then a fake technician talks you into remote access and a payment to fix a problem that never existed. Alongside it run quieter campaigns, fake Microsoft 365 renewal notices and Outlook 'verify your account' emails pointing at lookalike domains. Delivery methods rotate; the manufactured urgency is constant. One fact defeats the loudest version: Microsoft never initiates contact by phone about your computer, and real warnings never carry a phone number. Close the pop-up, hang up, and reach support only by typing support.microsoft.com yourself.
Frequently asked questions
I got a call saying my Windows PC is infected — is it really Microsoft?
No. Microsoft never makes unsolicited calls about viruses or computer problems. Hang up and report the call at scamwatch.gov.au.
Is a pop-up from Microsoft Support asking me to call a number legitimate?
Genuine Microsoft messages never appear as browser pop-ups with phone numbers. Close the tab, run a scan with Windows Security, and visit support.microsoft.com directly if you are concerned.
How do I check if an Outlook email is really from Microsoft?
Look at the sender address — it must end in @microsoft.com, @outlook.com or @live.com. Never click links; instead type the address into your browser yourself or check your account at account.microsoft.com.
What is Microsoft's real website?
Microsoft's genuine domains are microsoft.com, outlook.com and live.com, with support at support.microsoft.com and account management at account.microsoft.com. Reach them only by typing the address yourself or through the Get Help app built into Windows. Any 'Microsoft' page reached from a pop-up, text or unexpected email link should be treated as fake.
How do I report a Microsoft tech support scam in Australia?
Report it to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track the campaign. If you lost money or gave a scammer remote access to your computer, also lodge a report with ReportCyber at cyber.gov.au, and forward any scam texts to 7226 (spells SCAM).
Related scam types
Scams impersonating Microsoft usually fit one of these patterns. Learn how each works:
Related brands
Other tech names scammers impersonate — check a message from one:
Sources
- Phone scams: unsolicited calls from fake tech support (Scamwatch (National Anti-Scam Centre))
- Phishing scams: how scammers pose as trusted organisations (Scamwatch (National Anti-Scam Centre))
- Report a cybercrime or cyber security incident (Australian Cyber Security Centre)
This guide is general information, not legal or financial advice — always verify with Microsoft through an official channel.