Microsoft scams

Scammers send emails, texts and links that look like they come from Microsoft, to take your password, card details or money. Here is how to tell a fake from the real thing, and how to report one so it gets taken down.

Got a Microsoft message you are not sure about?

Don't click the link in it. Paste the link into ScamX and we'll tell you whether it really goes to Microsoft.

Check the link

The real Microsoft addresses

Microsoft's own sites end in:

  • microsoft.com
  • live.com
  • outlook.com
  • office.com

Read the address up to the first single slash: it must end with one of these. An extra word, a different ending or a shortened link means it is not Microsoft, however real the page looks. When in doubt, type the address yourself or use the Microsoft app.

What fake Microsoft messages look like

  • Cold calls from someone claiming to be Microsoft tech support
  • Fake error pop-ups on websites showing a "support" number to call
  • Emails from look-alike addresses such as micros0ft.com or rnicrosoft.com
  • Requests to pay for support with gift cards or cryptocurrency

What Microsoft says

  • Microsoft does not send unsolicited emails or make unsolicited calls asking for personal or financial information, or offering tech support. If one calls, hang up.
  • Microsoft will never ask you to pay for support in cryptocurrency or gift cards.
  • Send the original email as an attachment rather than forwarding it, so the message headers can be examined.

How to report a Microsoft scam

  1. Tell Microsoft. Send the phishing email as an attachment: [email protected]. Or: Report a tech support scam: https://www.microsoft.com/reportascam. Or: In Outlook, choose Report, then Report phishing.
  2. Get the fake site taken down. Scan the link: the report names the company hosting it and the registrar of its domain, with a ready-written message for each.
  3. Put a warning in front of everyone else. Report the link to Google Safe Browsing and Microsoft SmartScreen.
  4. If you lost money or shared details, call your bank first, then report it to the police or your national fraud line. Where to report in your country.

Microsoft's reporting route checked against Microsoft's own page on 2026-10-10. ScamX is not affiliated with Microsoft.