Windows 10: "Security Info Replacement" Email - Scam or legit?

Perusing the threads, have found some mentions of this dating back several years - but no definitive answer.



Received an email this morning stating from "Microsoft account team" *** Email address is removed for privacy ***


Email stated that someone "started a process to replace all security info for the Microsoft account f******" , i.e. loosely indicating my account.


The email then proceeded to provide three separate links to confirm it was me, click if it wasn't me, or click to remove the email from the account. I didn't identify or follow any of the links out of caution.



Looks very phish-y, no official logos, etc. Logged into my account today and saw no log-in activity beyond my own, and changed my password for good measure. Just wanted to check if there happens to be any type of validity to these type of communications, as generally things like this don't breach my email's spam filters.



Thanks in advance for any help.

:)

 

security scam?

Yes. That's a scam which is going on since many many years.

Suggestion to read:

• Beware of Phony Emails & Tech Support Scams

• https://www.microsoft.com/en-us/wdsi/threats/support-scams

• Avoiding technical support scams
• Tech Support Scams – Help & Resource Page
• Best Practices for Safe Computing - Prevention of Malware Infection

 

Scam or legit call?

That's a scam call....

Microsoft will never call you out of the blue.

Best to just hang up on those scammers.

Suggestion to read/watch:

• Beware of Phony Tech Support Scams
• New breakthroughs in combatting tech support scams - Microsoft on the Issues
  

 

How is it possible to replace ALL of the security info for a Microsoft account?

The email came from that address, so I don't expect there to be a web server at the other end.

Regardless, nothing in the email suggests it would be a scam. The actual links go directly to proper servers

Sign in to your Microsoft account

I'm curious how one goes about replacing all the security information on my account.

Clearly this is something that can be done, but I can't even figure out how to get a hold of the Microsoft security team.

I've got 2FA, and all of my info is up to date properly on live.com/microsoft.com, so I'm going to assume I'm okay.