Windows 10: Microsoft account security confirmation - is this a scam?

My friend just got 2 e-mails purporting to be from Microsoft Account Team.

The first one says her Microsoft account has been renamed. The renaming takes her current gmail address and changes 1 character in it.

The email then says:

If this is correct, you don't need to do anything.

If this is incorrect, please follow these steps:
1. Reset your password by going to Reset your password
2. Rename your account by going to https://account.live.com/

Thanks,
The Microsoft account team

The second email is titled Verify Your Email Address.

There is a link to verify her current (i.e. UNchanged gmail address) and she is told she may be asked to enter a security code. There is also a link to click if she didn't make the request to verify the account.

She DOES NOT have a Microsoft account to her knowledge.

Has anyone else encountered this, which is presumably a scam?

:)

 

What is this Microsoft account number that is being ask? Where do I get it? Thank you. It appears when I try to reset the password. It is under the special domain.

Hi Julio,

If you are referring to a verification code that is being sent to your email, it is a confirmation if your request was really sent by you or the owner of the
Microsoft account.

For security purposes, we are sending a security code like this to your alternate email address or phone number before you can proceed to make changes to your log –in credentials. Once you receive a request from us, you need to respond back so we will be
able to provide our services.

Visit this link:
Security info & security codes for more information about our Microsoft account verification process.

Let us know if you need more help.

 

What is this Microsoft account number that is being ask? Where do I get it? Thank you. It appears when I try to reset the password. It is under the special domain.

What is this Microsoft account number that is being ask? Where do I get it? Thank you. It appears when I try to reset the password. It is under the special domain.

[Moved from: Windows / Windows 10 / Windows update, recovery, & backup]

 

This sounds to me to be someone trying to take over her MS account. It appears she indeed does have one. Perhaps she created it long ago and forgot about it? If the links you posted are copied from the email, when I hover my mouse over them, I can see they are legitimate links. With the breach of Equifax, I expect we will see a lot of this now, as it revealed a tremendous amount of confidential information. I would recover the MS account and change the password, and keep an eye on it.

Just make sure the links you are clicking on are legitimate!

 

in short, this most likely a scam designed to get her login credentials. Have your friend look at this thread at bleepingcomputer.com

 

Thank you for your replies, @simrick and @yu gnomi. I will pass these on to my friend. Also advised her to change her gmail password as she's not in the habit of doing this.

 

Cheers! *Thumbs