Microsoft outage scam: fake sign-in emails and support calls

What the message looks like

How this scam works

The most common version is an email or text that copies Microsoft's logo and the wording of real outage notices. It says service has been restored but you need to sign in again, verify your account or 'resync' your mailbox. The link opens a convincing Microsoft sign-in page that sends your password straight to the criminals. With your email account, they can reset passwords on other sites and send more scams from your real address.

Another version comes by phone. Because people can't email their IT help desk, a call from someone saying they're 'Microsoft support' or your company's IT team feels helpful. The caller asks you to install a remote-access tool, read out a verification code, or pay for a 'fix'.

Businesses can also get a third version: a message saying a supplier has 'updated its bank details because of the outage' and asking you to send the next payment to a new account.

Red flags

• An email or text about the outage asking you to sign in again, verify, or 'restore' your mailbox.
• A deadline, such as 'within 24 hours or you'll lose your messages'.
• An unexpected call from 'Microsoft' or IT support offering to fix the problem.
• A request to install a program, share your screen, or read out a code.
• A supplier saying its bank details changed because of the outage.

How to tell it’s fake

1. Check the real status yourself: open the Microsoft 365 status page or the official @MSFT365Status account on X by typing the address, not by tapping a link.
2. Wait it out. When an outage ends, Outlook and Teams start working again on their own. You don't need to sign in through an email.
3. If someone calls offering help, hang up and call your IT team or provider at a number you already know.
4. Confirm any change to payment details by calling the supplier at a number you already have, never one in the message. If something seems legitimate but you aren't sure, get a scam expert's second opinion first.

What to do if you clicked, paid or shared info

Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.

If you clicked a link or called back

• If you opened the link but didn't type anything, close the page. If a file downloaded, don't open it; delete it and run a security scan.
• If you let a caller connect to your computer, disconnect it from the internet and have a trusted technician check and clean it.

If you paid

• If you paid a 'support' fee or sent a payment to new bank details, call your bank right away using the number on your card or statement and ask about stopping or recalling it.

If you shared personal info, a password or a code

• If you entered your Microsoft password, change it right away from a trusted device and turn on two-step verification. At work, tell your IT team immediately.
• Check your mailbox for forwarding rules you didn't set up, and change the password anywhere you reused it.

How Gmork Scam Guard would warn you

Scam Guard runs in Chrome and Edge on your computer. When you open a link from an outage email, it checks whether the sign-in page is really Microsoft's and warns you about look-alike login pages and suspicious downloads. It can't hear phone calls, so if a caller offers to fix your email, hang up and call your IT team or provider yourself.

Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.

Añadir a ChromeAñadir a EdgeAñadir a FirefoxAñadir a Opera

Questions people ask

Was the Microsoft outage a hack?

Microsoft said servers failed automated health checks and did not attribute it to a cyberattack. Scammers simply take advantage of the confusion.

Do I need to do anything to get my email back?

Usually no. When Microsoft fixes the problem, service returns on its own. Check the official status page for updates.

Will Microsoft call me about the outage?

Microsoft doesn't make unsolicited calls offering to fix your computer or account. Treat any such call as a scam.

Is it safe once the outage is over?

Stay careful for a while. Fake 'security update' and 'sign in again' messages often keep coming after service returns.

Sources

• McAfee: Microsoft outage today – Outlook down and scams to watch
• Infosecurity Magazine: Microsoft 365 outage set to ramp up security risks
• IMB Bank: Scammers likely to exploit Microsoft outage
• Microsoft 365 service status
• Microsoft: Protect yourself from tech support scams