Microsoft "Password Reset – Cancel It" Email Scam
Password reset cancellation — if-not-you framing forces immediate credential entry
Microsoft: A password reset was requested for your account. If this wasn't you, cancel it immediately: ms-pwreset-cancel.com
Confirmed scam
Unsolicited password reset emails signal an actual breach attempt — making even security-conscious users click to 'stop it'.
Typical victim loss: $200–$3,000
FTC Consumer Sentinel 2024 — tech support scam median $500
First seen
Oct 2024
Category
Tech Support
Attack vector
Trigger
Panic / Urgency
3 red flags in this message
Fake cancel mechanism
Clicking 'cancel' delivers your current credentials to scammers.
Fake domain
Password resets only come from @microsoft.com.
Not-you panic
Fear of someone taking over your account drives instant clicking.
What happens if you click
Current Microsoft credentials stolen via 'cancel' button.
Real password then reset by scammer using stolen credentials.
Fake Microsoft domains used in this scam
4 identifiedScammers register multiple lookalike domains for the same campaign — rotating them to avoid spam filters. Any link from these domains is fraudulent.The only legitimate Microsoft address is microsoft.com.
4 fraudulent domains identified — consistent with organized scam infrastructure.
Other versions of this message
Scammers rotate wording to bypass spam filters. All variations lead to the same outcome.
Microsoft: Your password is being reset. Cancel if unauthorized.
MICROSOFT SECURITY: Password change initiated. Stop it now if not you.
Got a similar message? Check it now.
Paste any text message or email for an instant analysis — free, no account needed.
Free · No signup · Messages never stored · ⌘↵ to analyze
People also search for
Frequently asked questions
How does a real Microsoft password reset email look?+
It comes from @microsoft.com, addresses you by your Microsoft account name, and includes a link to account.microsoft.com.
If someone really did request a password reset, what do I do?+
Go directly to account.microsoft.com > Security > Change Password. Do not click any email link.
What can a scammer do with my Microsoft credentials?+
Access Outlook (and all email), OneDrive, Xbox, Microsoft 365, and reset passwords on any account that uses that email for recovery.
Other Microsoft scams
Received a suspicious message?
Free · No signup · AI-powered detection
Check your message →First documented: October 2024
Source: FTC Consumer Sentinel 2024 — tech support scam median $500
← Full scam database