This is a version of Microsoft Account Password Expired Scam.
Microsoft Password Expired – Update Password Now Email
A phishing email claims your Microsoft password has expired and tells you to update it within 24 hours to avoid suspension and data loss. It includes a large 'Update Password Now' button, lists services like Outlook and OneDrive, and uses an official-sounding footer to look real. The link leads to a fake sign-in page that steals your Microsoft login.

What’s different in this version
These traits set this message apart from the usual pattern.
-
Uses the subject style “Password Expired – Immediate Action Required”
-
Lists Outlook, OneDrive, Office 365, and Teams to increase urgency
-
Threatens suspension and data loss within 24 hours to force quick action
-
Pushes a single 'Update Password Now' button leading to a fake login page
-
Includes a corporate address and legal links to appear legitimate
-
Says not to reply, steering you to use the malicious button
How this scam works
- 1
Step 1: An email arrives claiming your Microsoft password has expired or will expire soon.
- 2
Step 2: It lists services like Outlook, OneDrive, Office 365, and Teams to raise the stakes.
- 3
Step 3: A big button says 'Update Password Now' that opens a fake Microsoft sign-in page.
- 4
Step 4: You enter your email and password; scammers capture them instantly.
- 5
Step 5: They can log in to your account, read emails, reset your password, and try the same password on other accounts.
✓ Do this
- Go to account.microsoft.com or office.com by typing it yourself, or use the official Microsoft apps to check for alerts.
- Sign in normally; if your password truly expired, Microsoft will prompt you after you log in.
- Turn on two-step verification (2FA) in your Microsoft account for added protection.
- If this is a work or school account, contact your IT help desk to confirm before taking any action.
- If you clicked and entered info, change your Microsoft password immediately and review recent sign-ins.
✗ Avoid this
- Don’t click 'Update Password' buttons in unexpected emails.
- Don’t enter your password on any page opened from an email link.
- Don’t be rushed by threats like '24 hours left' or 'files will be deleted.'
- Don’t reply to the email or call numbers listed in it; use official support channels instead.
Verbatim excerpts from the scam
Exact lines from emails or messages—searchable text so you can compare wording.
- 1 Excerpt 1Microsoft Microsoft Account Password Expired - Immediate Action Required Dear victimemail@email.com, Your Microsoft account password has expired and requires immediate renewal to maintain access to your services. ⚠️ Account Status: PASSWORD EXPIRED Services affected: Outlook, OneDrive, Office 365, Teams To avoid account suspension and data loss, please update your password within the next 24 hours: Update Password Now What happens if you don't update: Immediate suspension of all Microsoft services Loss of access to emails and documents OneDrive files may be permanently deleted Account recovery may not be possible This is an automated security message from Microsoft Account Security. For your protection, please do not reply to this email. If you did not request this password reset, please secure your account immediately. Microsoft Corporation One Microsoft Way, Redmond, WA 98052, USA Privacy Statement | Terms of Use