Microsoft prioritizes account security and works to prevent people from signing in without your permission. When we notice a sign-in attempt from a new location or device, we help protect the account by sending you an email message and an SMS alert.

Does Microsoft contact you by email?

Microsoft does not send unsolicited email messages or make unsolicited phone calls to request personal or financial information, or to fix your computer. Any communication with Microsoft has to be initiated by you. ... Microsoft's error and warning messages never include a phone number.

Is email from Microsoft legit?

If you get an email from Microsoft account team and the email address domain is @accountprotection.microsoft.com, it is safe to trust the message and open it. Microsoft uses this domain to send email notifications about your Microsoft account.