Federated identity management using Active Directory Federation Services
The SMS is a security notification indicating that a Microsoft account with a phone number ending in the digits shown may have been used by someone else and that recovery is recommended.
Microsoft can send text messages when there is a sign‑in attempt or when identity verification is required. If a verification or security message is received but was not requested, it can mean either:
- Someone is trying to access the account, or
- Someone mistyped a phone number or email when signing in.
Do not click links in the message if unsure it is genuine. Instead:
- Open a browser and manually go to
https://account.microsoft.com. - Sign in and review recent activity, security information, and sign‑in attempts.
- Follow the on‑screen guidance to secure the account (change password, review security info, enable two‑step verification, etc.).
If verification codes or security texts continue to arrive without being requested, follow the guidance on keeping the Microsoft account secure and on troubleshooting unrequested verification codes.
References: