Microsoft Account ‘Outlook Web Access’ Phishing Scam
The original site is no longer online; links go to the Internet Archive copy.
The claim
Email purporting to be from the Microsoft Account Team claims that recipients must click a link to upgrade their email account and set up Outlook Web Access.
Upgrade Your Outlook Web Access (OWA).
From: Microsoft account team
Microsoft account
upgrade your email account
To finish setting up this Microsoft account, we just need to make sure you did not loose any messages from your Microsoft Web Access.
Upgrade your email
If the upgrade link did not work click link below, click here to proceed.
Thanks,
The Microsoft account team
What the fact-checkers found
The email is not from Microsoft and the claim that users must click a link to upgrade their email accounts is a lie. The message is a phishing scam designed to trick users into sending their Microsoft account login details to criminals.
According to this email, which claims to be from the Microsoft Account Team, recipients need to click a link in the message to finish setting up their Microsoft account. The message instructs users to click an ‘upgrade your email account’ link to allow Outlook Web Access and ensure that they do not lose any emails.
However, the email is not from Microsoft and the claim that users must follow a link to upgrade their email account is untrue. Instead, the email is a criminal ruse designed to trick people into giving their Microsoft account details to cybercriminals. Those who fall for the trick and click one of the links as instructed will be taken to a bogus ‘Microsoft’ website that displays the following login form:
Once they have added their email address and password, victims will then be presented with a message claiming that their ‘Outlook account was updated successfully’. Within a few seconds, they will be redirected to a genuine Microsoft website.
Meanwhile, the criminals responsible for the phishing campaign can use the stolen credentials to hijack the real Microsoft accounts belonging to their victims. A ‘ Microsoft account ‘ is the new name for what was previously known as a ‘Windows Live ID.’ The one set of login details can be used to access a number of Microsoft services, and are thus a valuable target for scammers.
Online criminals commonly use such phishing techniques. Be wary of any message that claims that you must click a link or open an attachment to upgrade account details, rectify a supposed account issue, or implement new ‘security’ measures. If you receive a suspect message, do not click on any links or open any attachments that it contains. Instead, log in to your account by entering the address into your web browser or via an official account application.
Got a similar message?
Paste it into the detector and see whether it matches a known hoax.
Check a similar messageRelated fact-checks
Browse the archive →Microsoft Outlook ‘Account Exceeded Storage Limit’ Phishing Scam
According to this email, which claims to be from the Microsoft Outlook account team, your email account has exceeded its storage limit.
Microsoft Outlook ‘Account Blocked Due to System Error’ Phishing Scam
The email is not from Microsoft. It is a phishing scam designed to steal your Microsoft Account login details. According to this email, which claims to be from Microsoft, your account is about to be blocked due to a system error.
‘Due to the Rate of Phishing’ Security Update Email is Itself a Phishing Scam
In a rather ironic twist, this phishing scam message uses the threat of phishing as a cover story designed to trick people into divulging their email account login details.
‘Request To Terminate Outlook Account’ Phishing Scam
According to this email, the ‘Microsoft account team’ has received a request to terminate your Outlook account. The email notes that, if you did not make such a request, you should open an attached file to cancel the pending termination.