Windows 10: Unusual Sign-in activity - Phishing spam??

I couldn't determine which category to put this since none seemed to fit..

On May 1, 2020 7:35 PM Microsoft Team <*** Email address is removed for privacy ***> wrote:


I've received this message 6 times over the past few weeks. The IP address from the alleged activity changes, but the message remains the same. I log into my microsoft account and it shows there is no unusual login, thus I presume this is spam. Any suggestions for where to check to see what has been compromised, or if they've simple gotten my email and are phishing?

Unusual Sign-in activity


We detected something unusual about a recent sign-in to Microsoft account [addressed removed for security]

Sign-in details

Country/region: Unted State
IP address: 104.170.186.79
Platform: Mac OS
Browser: Google Chrom

Please go your recent activity page to let us know whether or not this was you . If this wasn't you. we'll help you secure your account. we'll trust similar activity in the future.

Review recent activity



The Microsoft Security Essentials
Microsoft Team office Center
all rights reserved © 2020

:)

 

phishing email

While there are legitimate emails from the Microsoft account team,
email phishing scams using the Microsoft name are very common so you have to be very careful. A
legitimate email address domain from Microsoft is @accountprotection.microsoft.com.

• Can I trust email from the Microsoft account team?
• What happens if there's an unusual sign-in to your Microsoft account
• Watch Out for This Office 365 Phishing Email

This is an example of an older scam:
Ask Leo: Is Windows Live Hotmail about to close my account?

• Report phishing scams
• Submit spam, non-spam, and phishing scam messages to Microsoft
• Avoid and report phishing emails
• FTC Complaint Assistant

 

Microsoft account unusual sign-in activity

Thank you for the reply. I have answered your questions in bold.

But I still fail to see why any of the questions/measures apply to my situation when Microsoft's "Review recent activity" log shows no "unusual sign-in activity" whatsoever. There are approximately 20 sessions showing on my activity log currently, and everyone
single one of them shows them to be: my computer, my IP address, my location, my operating system, my browser; all at times of the day when I was on my computer...

So unless Microsoft's "Review recent activity" page is inaccurate, where on earth is the "unusual sign-in activity" and why am I getting daily emails alerting me to something, that according to Microsoft's "recent activity" log, does not exist?

Thanks for your continued help/efforts,

SR

03/03/17: Update: and, FTR, I got the email again last night, 8 days in a row now. And once again, there is no "unusual sign-in activity" showing in my "recent activity" whatsoever.

 

Microsoft account unusual sign-in activity

Since you have checked your recent activity and confirmed that there were no unusual activities made, please provide us the following information:

• Do you have a new phone from a different provider, or any new apps were installed that might try to sign in using your account?

• Some apps that sign in on your behalf including email apps and social media apps tied to a Microsoft account.
• Apps that sign in on your behalf will need to ask for permissions to do so when they are installed, and will prompt you for your Microsoft account and password.

• Do you remember having to enter your password when you set up any Windows Phone or Windows apps?

If you can't think of any reason why a sign in would occur
from a different location, we strongly suggest that you reset your password and check for unusual activity on any other accounts that you might have.

If you suspect that your account was compromised, you can do the following:

• If apps, services, or subscriptions were purchased with this account:

• Sign-in to account.microsoft.com
• Click Review your purchases and make sure there were no new transactions that you didn't make or expect.
• Click Billing info and make sure your billing info wasn't changed.

• If you're using OneDrive to store and share files, photos, or other data:

• Sign-in to OneDrive.live.com
• Click Shared on the side menu
• Review the folders and files that are being shared to make sure files are not being shared with people you don't know or that any shares you made weren't deleted.

• If you're using an Outlook or Hotmail email account:

• Sign-in to outlook.com
• Click the gear-shaped Settings icon, then click Options.
• Check the following settings and restore any that might have been lost or changed:
• Check the deleted mail folder and Contacts lists to make sure unusual messages or contacts weren't added, sent, or deleted.

Please post back with the result for further assistance.