Scammers Are Exploiting a Microsoft Email Address to Send Spam and Phishing Links
Scammers have exploited a loophole in Microsoft’s email systems for several months by sending spam and phishing links from msonlineservicesteam@microsoftonline.com, a real address used for account alerts and 2FA codes, a TechCrunch report (May 2026) says. The Spamhaus Project confirmed the abuse and notified Microsoft; Microsoft acknowledged the inquiry but hadn’t confirmed whether it was stopped.