Microsoft "Verify your identity" sign-in screen

A sign-in screen with the Microsoft logo, your work or school email address and the heading "Verify your identity". It offers to text or call a phone number ending in your last two digits, or to use the Microsoft Authenticator app. Some versions also ask whether your verification methods are current and point to aka.ms/mfasetup.

Microsoft. name[at]yourcompany[.]com. Verify your identity. Text +X XXXXXXXX12. Call +X XXXXXXXX12. Microsoft Authenticator app. Are your verification methods current? Check at aka.ms/mfasetup

Why this is a scam

The screen itself is real. Microsoft asks for another way to confirm it is you during sign-in, using a method you set up before. The real aka.ms/mfasetup leads to Microsoft's My Sign-Ins page, mysignins.microsoft.com, where those methods are managed.

If you didn't just sign in, someone may be trying to get into your account, and may already have your password. Microsoft's advice is not to respond to any code you didn't request.

If a link in an email, a text, a QR code or a shared document brought you to the screen, it can be a fake copy built to look the same, often showing your own email address. Close it and sign in yourself.

Red flags

  • You didn't start a sign-in. This step only comes up during one, so if you didn't start it, it isn't yours to finish.
  • You got there from a link in an email, a text, a QR code or a shared document, not by typing the address or opening your usual app.
  • The address bar shows an address you don't recognise. Your IT team can tell you which sign-in address your organisation uses.
  • Someone calls or messages asking you to read out the code or approve the request.

How it works

Familiarity. The copy looks exactly like the screen you see every day, so nothing about it makes you stop and check.

What to do

If you didn't just sign in

  • Deny the request in Microsoft Authenticator, and never approve it or read out a code, whoever asks. That includes someone who calls saying they are from IT or Microsoft.
  • Change your password now, from a sign-in page you reach by typing the address yourself.
  • Tell your IT or security team straight away.

If a link brought you to the screen

  • Close the page. Open a new tab, type the address of your work app yourself and sign in from there.
  • If you already entered your password or a code, change your password now and tell your IT team, even if nothing seems wrong.
  • Watch for new inbox rules, forwarding or sign-in alerts you didn't set up.

Related: Microsoft "verify your identity" email and Microsoft sign-in approval request you didn't expect.

Scam

Red flag

Flggd found signs in this message that match known scam patterns. Do not reply, click, call or pay.

What to do next

Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.

Likely to be a scam

Yellow flag

It asks you to act: a link, a number, a reply or a payment. Where that request leads is where the harm starts.

What to do next

Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.

Likely to be a scam

Grey flag

Nothing is asked of you yet. The content, the sender or the intent do not add up. Scams like this start friendly and ask later.

What to do next

Do not reply at all, not even to say wrong number. A reply tells them the number is live. Block the sender and delete the message. If a request follows, check it again.

Looks normal

Green flag

Flggd found nothing in this message that matches known scam patterns. This is an assessment of the message, not a guarantee. Accounts can be taken over, so if a request seems out of character, check again.

What to do next

No action needed. If the sender later asks for money, codes or personal details, check that message too.

Your screenshot

Check another message

Paste a text, email or direct message

A text, an email or a chat message. Paste the whole message, exactly as you got it.

Add a screenshot

Check it

No account needed.

What happens to your message

Checking the message now. Stay on this page.

Flggd could not check this message just now. Try again in a moment, or use the Flggd app.

Try again

Flggd could not read this image, so it has not been checked. This is not a verdict. Try a clearer screenshot, or paste the text instead.

Paste a message or add a screenshot first.

F

Flggd Verdict

Text Submission

Image Submission

Flggd Verdict

Scam

Red flag

Flggd found signs in this message that match known scam patterns. Do not reply, click, call or pay.

Likely to be a scam

Yellow flag

It asks you to act: a link, a number, a reply or a payment. Where that request leads is where the harm starts.

Looks normal

Green flag

Flggd found nothing in this message that matches known scam patterns. This is an assessment of the message, not a guarantee. Accounts can be taken over, so if a request seems out of character, check again.

Likely to be a scam

Grey flag

Nothing is asked of you yet. The content, the sender or the intent do not add up. Scams like this start friendly and ask later.

This result could not be shown. Check the message again. If it happens twice, use the Flggd app instead.

Score

Scam type

Confidence

Why Flggd says this

What this message wants you to do

Has anything happened yet?

You do not have to answer. Nothing you tap here is sent or recorded, and the verdict above stands either way.

Change answer

Nothing has happened yet

Good. Checking first is the safest thing to do. Do not tap any link, reply, or call any number in the message. Block the sender and delete the message. If it claims to be from an organisation you know, contact them using details you already trust.

Change answer

You tapped a link

Opening a link does not usually take money or details on its own. The harm comes from what you do on the page it opens. If you entered nothing and installed nothing, close the page and do not go back to it. If it asked you to sign in, enter a code, or install something, and you did, choose Gave details instead.

Change answer

You gave details

Work through this in order. First, if you gave bank or card details, call your bank now on the number on your card. Next, change the password for any account you entered, and for any other account that uses the same password. If you shared a one-time code, tell the organisation it belongs to straight away. Then turn on two-step verification where you can, and watch your statements for anything you do not recognise.

Change answer

You sent money

Call your bank now, on the number on your card or in your banking app. Say: "I have been scammed and I need to stop a payment." The sooner they hear from you, the more they may be able to stop or recover. In the UK you can call 159 to reach your bank. Do not pay anyone who offers to get the money back. That is another scam.

Report it. US: ReportFraud.ftc.gov, and ic3.gov for online crime. UK: reportfraud.police.uk or 0300 123 2040; in Scotland, Police Scotland on 101. Australia: scamwatch.gov.au. Have ready the message, the sender's number or address, and any payment details.

What to do next

Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.

Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.

No action needed. If the sender later asks for money, codes or personal details, check that message too.

Do not reply at all, not even to say wrong number. A reply tells them the number is live. Block the sender and delete the message. If a request follows, check it again.

Your message

Text read from your image

Your image

The closest scam in the Flggd library. Similar, not necessarily the same message.

How this scam works

The closest match is the scam described on this page.

Share this result

Email it to myself

Copied. Paste it anywhere to share it.

Could not copy. Select the text and copy it, or use Email it to myself.

Checked with Flggd at flggd.com

My Flggd verdict

Check the next one on your phone

The Flggd app checks texts, emails and screenshots wherever you are, and teaches you the warning signs as you go. Free on iPhone and Android.

Get the app

Have this emailed to you

Send yourself this page so you can forward it, or read it later when you are not standing in a shop.

Email it to myself

Worried about someone else rather than yourself?

Helping someone else

Scams like this one

Closest to this one

No items found.

Others of this type

The tactic behind it

Borrowed trust

Every example on this page is a real scam, recreated by Flggd
How we decide what is a scam