Is this security alert from Microsoft a scam?
Tech companies like Microsoft are impersonated with fake security-alert, account-locked and subscription-renewal scams. A text, email or pop-up alert that looks like it's from Microsoft can be genuine — but it can just as easily be a scam built to look identical. The good news: a few quick checks almost always tell a real Microsoft message from a fake.
Genuine Microsoft links only ever go to microsoft.com, outlook.com, live.com. Below is exactly what a real Microsoft message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Microsoft message looks like
Genuine messages from Microsoft only ever link to microsoft.com, outlook.com, live.com.
- Emails from Microsoft arrive only from @microsoft.com, @outlook.com or @live.com addresses
- Legitimate Microsoft emails never contain urgent demands to call an unknown number or download software
- Genuine Microsoft support is reached through the Microsoft Support app or by typing support.microsoft.com yourself
- Microsoft never initiates contact by phone about a supposed virus or security issue on your computer
- Official Microsoft messages about Windows or Outlook never ask you to grant remote desktop access
Crucially, Microsoft will never ask for your password or a verification code, or demand remote access to 'fix' or 'secure' your account.
Common Microsoft scams
- Cold calls claiming your Windows PC has a virus and directing you to a fake support number
- Browser pop-ups displaying a fake Microsoft logo and urging you to call a supplied number for 'immediate help'
- Emails pretending to be from Outlook or Microsoft that contain a link asking you to 'verify your account' on a lookalike domain
Red flags to watch for
- Any unsolicited phone call from someone claiming to be Microsoft or Windows Support
- Requests to install software, allow remote access, or provide a credit-card number for a supposed Microsoft fix
- Pop-ups or emails that create urgency by claiming your computer will be locked or data lost unless you act now
- Messages directing you to a domain such as microsoft-support-login.com or windows-alert.net instead of microsoft.com
Scam text examples
Here's a real example of a scam message impersonating Microsoft, with the tell-tale red flags highlighted. Compare it against anything you've received.
Microsoft Security Alert: Your Windows device has been compromised. Call 1800-555-0199 immediately or visit microsoft-techsupport.net to prevent data loss.
What gives it away:
- Any unsolicited phone call from someone claiming to be Microsoft or Windows Support
- Requests to install software, allow remote access, or provide a credit-card number for a supposed Microsoft fix
- Pop-ups or emails that create urgency by claiming your computer will be locked or data lost unless you act now
- Messages directing you to a domain such as microsoft-support-login.com or windows-alert.net instead of microsoft.com
Not sure about your message?
Paste the suspicious Microsoft text or email and get an instant scam verdict, free.
How to verify a message from Microsoft
- Type support.microsoft.com into your browser yourself
- Open the Get Help or Microsoft Support app that came with Windows
- Sign in at account.microsoft.com using your real outlook.com or live.com address
Where to report a scam impersonating Microsoft
Received — or fell for — a message impersonating Microsoft? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Report scam texts and spam SMS or calls.
- Forward to 7226 (SPAM) — Forward the scam SMS to short code 7226 so your carrier can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Frequently asked questions
I got a call saying my Windows PC is infected — is it really Microsoft?
No. Microsoft never makes unsolicited calls about viruses or computer problems. Hang up and report the call at scamwatch.gov.au.
Is a pop-up from Microsoft Support asking me to call a number legitimate?
Genuine Microsoft messages never appear as browser pop-ups with phone numbers. Close the tab, run a scan with Windows Security, and visit support.microsoft.com directly if you are concerned.
How do I check if an Outlook email is really from Microsoft?
Look at the sender address — it must end in @microsoft.com, @outlook.com or @live.com. Never click links; instead type the address into your browser yourself or check your account at account.microsoft.com.
Related scam types
Scams impersonating Microsoft usually fit one of these patterns. Learn how each works:
Related brands
Other tech names scammers impersonate — check a message from one:
This guide is general information, not legal or financial advice — always verify with Microsoft through an official channel.