Beware of Scams During the Microsoft Outage

Beware of Scams During the Microsoft Outage

Be extra careful online and on the phone until services are fully restored.

Fraudsters often exploit major IT outages, because people are worried, rushed and looking for quick fixes. While services are disrupted, expect criminals to pose as Microsoft, your employer's IT team or support provider. 

What scam messages may look like

You may receive emails, Teams messages, texts and phone calls or pop-ups that:

Tell you to “verify your account” or “Restore mailbox access”

Claim your two-step verification (MFA) needs resetting

Say your account will be locked or deleted unless you act now

Offer a recovery or fix to download

Ask you to scam a QR code

Ask to take remote control of you device

How to protect yourself

Treat unexpected contact as suspicious, even with official Microsoft logos, our IT department or business support

Never click links or scan QR codes

Never share passwords, PINs or authentication codes

Don't instal software or allow remote access

Use official sources only for outage updates

Verify independently using a  Tel number or channel you already know

Slow down. Urgency and pressure are warning signs

If you've already clicked, entered details or let someone in 

Act quickly

Disconnect your device from the Wi-Fi or network

Change all your passwords starting with Microsoft and email, ideally from a trusted device

Re-set 2 step verification

Run a full antivirus if you are able to 

Check email settings for any new forwarding rules

Call your bank straight away on 159 if you have shared any financial details or paid anything

Report it

Suspicious emails to Gov UK report phishing website

Suspicious texts forward to 7726

Contact Report Fraud online or 0300 123 2040

Warn friends and family

Please note I am unable to reply to any requests to this alert. If you need further advice call Ask Damian the 24/7 fraud advice service on 01202 144688. Make sure you set up a password with the service and note that it will never call you directly.