Outlook scams
Outlook/Microsoft phishing uses 'account locked', 'verify Microsoft 365', and shared-file lures to steal work and personal logins.
Want to check a specific Outlook message? Use the Outlook scam checker →
How scams appear on Outlook
Outlook and Microsoft 365 phishing imitates account and admin notices: a mailbox 'locked', a sign-in to 'reconfirm', or a file shared through the work tenant. The link opens a near-perfect Microsoft sign-in page that harvests work and personal credentials in one step. Workplace targeting makes these especially effective, since a single login can expose colleagues and shared files. Verifying through the official portal, rather than the email link, defeats it.
Common Outlook scam examples
Sanitised examples - placeholders only, never real links or data.
Example only: Microsoft: unusual sign-in - verify your account: [fake-link removed]
Example only: Your Outlook will be deactivated - confirm now: [fake-link removed]
Red flags on Outlook
- A 'security alert' or invoice pushing you to a login link
- Sender address or domain that isn't the real one
- Unexpected attachments or 'enable content' prompts
- Urgency, threats, or too-good offers
How to verify safely
- Open accounts via the official app or an address you type yourself.
- Hover/long-press links to see the real destination before tapping.
- Verify unexpected invoices or requests with the sender directly.
How to report inside Outlook
- Use Outlook's 'Report' → 'Report phishing'.
- Check sign-in activity and enable two-step verification.
- Verify shared files inside the official app, not via the link.
How to protect your Outlook account
- Turn on app-based two-step verification for your email.
- Use a unique password and a password manager.
- Review forwarding rules and recent sign-ins for anything unfamiliar.
Related Outlook scam messages you can check
- Is this OTP / verification code request a scam?
- Is this Meta Business Support warning a scam?
- Is this PayPal invoice email a scam?
- Is this crypto recovery agent message a scam?
- Is this sextortion 'hello pervert' email a scam?
- Is this DHL customs duty payment scam a scam?
- Is this Amazon package delivery problem text a scam?
- Is this warehouse hold package scam a scam?
- Is this fake parking fine message a scam?
- Is this PayID buyer payment scam a scam?
- Is this Zelle payment pending scam a scam?
- Is this Cash App payment pending scam a scam?
Related scam-type hubs
Related red flags
Glossary terms
Got a message like this?
Check it to see the specific red flags and what to do next.
Check a messageSources
Frequently asked questions
How do I know if a Outlook message is a scam?
Check it against the red flags above and verify through the official app or website you open yourself. When in doubt, don't click, pay, or share codes.
How do I report a scam on Outlook?
Use Outlook's 'Report' → 'Report phishing'.
Last reviewed: 2026-06-15.