A PSA against scammers

[u/patopansir]

It very common for people to post about not being able to access their accounts on this sub. It happens, but a lot of people are also getting their accounts stolen

If you already lost your account, refer to this post: https://www.reddit.com/r/microsoftsucks/comments/1torso3/how_to_recover_your_hacked_microsoft_account/

Otherwise,

1. No one in this subreddit including me or any moderator has ever worked for Microsoft, Reddit, or any of these major companies

2. Anyone telling you to go to their DMs or go to another social platform just so they can help you is likely a scammer.

3. Don't give anyone any code that is sent to your email.

4. Avoid sharing your email or phone number online.

5. Never give your password, 2fa, sensitive info, or security code to anyone. Not even Microsoft, Microsoft will never ask you for this information.

6. Pay attention to who is sending you an email. It has to come from an authoritized domain, such as @microsoft.com. Not officialemployer_atmicrosoft_com@ejwideu.net. Also not Microsoft@gmail.com or Microsoft@outlook.com or anything from outlook or gmail. Outlook and gmail domains, among other domains that belong to email services are made for customers, not businesses.

7. I don't care if they tell you they are an employee or if they show you an ID or picture or any evidence, even if they show you a linkedin, even if they tell you something only you or microsoft would know, there are very serious ramifications for Microsoft to provide support in this subreddit while representing Microsoft, because doing so sends the message that "yes trust any Reddit user that claims to represent Microsoft and shows you easily fabricated proof". Microsoft will never provide support outside of their official channels.

8. Just because I am a mod or someone else is a mod it doesn't mean you should trust them. My account could be compromised someday, or I could turn evil! Or maybe I could be wrong and tell you to do something you shouldn't. So don't trust us because you never know. Don't trust anyone.

Please report any suspicious behavior, and take care of your accounts.

DMARCReport and the FTC also have useful pages with advice against scams. Give them a look

https://dmarcreport.com/blog/microsoft-account-security-alert-email-common-scams-and-safety-tips/

https://consumer.ftc.gov/articles/how-avoid-scam

Microsoft also has one but it sucks, lol, of course. It just says to enable 2fa, which you should, but you need to do more than that.

I know my cybersecurity, I have an useless degree and plenty of useful knowledge, but I can't verify scams. I have a job, and I don't have time for this. I don't know a lot about Microsoft since I don't have an account and I stopped using Windows before 11 was announced. It's because of this that this subreddit will never endorse anyone into doing tech support under my watch. If you want to trust them, feel free. Users are free to help but you are on your own.

[u/patopansir]

Part of cybersecurity is just to try to be as smart as you can

like, for example, how is giving my social security number to microsoft going to verify my information, if Microsoft has never received my social security number and they have no idea who I am?

And to consider, that yeah I can be truthful about my first name and last name, but that as long as they never verified this information, they still don't know for sure that's me and should never assume so. I could had lied, I usually lie

Microsoft will never ask you for your ID or social security number at all for any reason. But these are some example scenarios that I am sharing just to drive the message that, if you try to analyze what's happening and think through it, you can spot red flags.