Prevent single-use code phishing emails

Question

Good Afternoon, we have Outlook Exchange host our secure email server by our company's broker/dealer. Weekly my colleague will get emails from account-security-noreply@accountprotection.microsoft.com with subject line "Your single-use code". The body of the email states "We received your request for a single-use code to use with your Microsoft account. Your single-use code is__. If you didn't request this code, you can safely ignore this email. Someone else might have typed your email address by mistake. Thanks, The Microsoft account team." though my colleague never has requested those codes from Microsoft and they come at odd hours of the day. How should we proceed with stopping those email alerts and prevent them? Thank you.

Answer

Hi @Anonymous

If these emails are actually from accountprotection.microsoft.com, they are legitimate emails sent by Microsoft.

Please refer to this link: Can I trust email from the Microsoft account team?

The reason why users are receiving these emails even if they are not requesting codes from Microsoft may either be someone mistakes their account address with yours, or he is trying to hack these accounts.

Please contact your Azure AD admin to check the Azure sign-in logs if you can find some suspicious sign-in attempts.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Share via

Prevent single-use code phishing emails

1 answer

Your answer