An email asks you to sign in, open an invoice, buy gift cards or urgently wire money; the sender looks odd or the link points to an unfamiliar site.
1. Do not click links, open attachments or reply. 2. In Outlook use Report → Report phishing (or forward the message as an attachment to support). 3. If you already clicked or entered your password: change your password now at https://aka.ms/sspr and tell support immediately so we can check for sign-ins and mail rules. 4. Delete the message. We block the sender and remove copies from other mailboxes.