Suspicious link

Michael A. Wolff 0 Reputation points
2025-10-23T16:46:20.0633333+00:00

I received an email that says it's from me. It is not, but when I hover over my name, the information presented is correct.

I do see a little information icon "(i) We could not verify the identity of the sender. Click here to learn more.

There's a PDF attachment "Information deleted for privacy protection.pdf" and the entire message is "SCAN TO VIEW". No signature, etc.

My question is, can I preview the PDF file in Outlook (the app or the online version) safely?

Outlook | Windows | Classic Outlook for Windows | For business
{count} votes

1 answer

Sort by: Most helpful
  1. Ryan-N 5,435 Reputation points Microsoft External Staff Moderator
    2025-10-23T17:47:21.01+00:00

    Hi @Michael A. Wolff,

    Welcome to the Microsoft Q&A forum.

    Thank you for reaching out to us. I understand that you are receiving an email that appears to come from your own account.

    First, you should not click on the attached file. Instead, please follow the steps below to check if there is anything suspicious:

    Step 1:

    Access Outlook and check the Sent folder to see if there is any email sent to your own account.

    • If not, ignore the email and mark it as a red flag, as your username might have been exposed and impersonated.

    Step 2:

    Follow these steps (they require admin privileges in Admin Center; if you do not have admin rights, please contact your IT department):

    1. Go to entra.microsoft.com:
      • Click Users > All Users > select your username User's image
      • Then click Sign-in log and check for any unusual sign-ins. User's image
    2. Next, go to admin.exchange.microsoft.com:
      • Click Mail flow > Message trace > Start a trace and check if there is anything abnormal in the email flow for this account. User's image

    After completing these steps, you will know the source of the activity and why you received that email, as well as verify if there are any suspicious logins on your account.

    To ensure maximum security for your email account and tenant, I recommend that you raise a support ticket with Microsoft Technical Support. After raising the ticket, you can provide them with the information you gathered from the steps above. They will help you investigate and clean up your tenant to protect it.

    To contact them, please raise a ticket through the following link: https://admin.microsoft.com/#/homepage

    If you have any updates regarding this issue or any other questions, feel free to share with me. I will assist you.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

    User's image

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.