A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Text messages with 6-digit Microsoft verification codes are typically sent when someone is trying to sign in to a Microsoft account and has your phone number set up as security info.
Key points based on the behavior described:
- Why the texts are being received
- Microsoft sends verification codes by SMS when:
- Someone signs in or uses a feature that requires identity verification.
- Someone signs in from a new device or location.
- Two-step verification is enabled and SMS is chosen as the method.
- Messages can come from short codes like 69525 or the sender name Microsoft. The short code (for example, 69525) is the sending number, not the verification code itself.
- If these codes were not requested, it may mean:
- Someone is trying to access an account that has this phone number as security info, or
- Someone mistyped their own phone/email when signing in.
- Microsoft sends verification codes by SMS when:
- Is it a scam or genuine?
- Microsoft states that 69525 and some messages from Microsoft are genuine senders for security codes and alerts.
- Genuine Microsoft SMS links start with aka.ms. If unsure, do not click any link; instead, go directly to https://account.microsoft.com or https://account.live.com by typing it into the browser.
- If a verification code was received that was not requested, treat it as a possible sign that someone is trying to access an account.
- Checking which account is using the phone number
- The provided context does not include a tool or method to look up “which Microsoft account this phone number is linked to.”
- The recommended approach is:
- Sign in to any Microsoft accounts owned (for example, at https://account.microsoft.com) and review the security info on the Security or Security basics page to confirm which phone numbers and emails are listed.
- If a phone number is not listed on an account, that specific account is not currently using it as security info.
- What to do if the codes were not requested
- Do not share the codes with anyone and do not enter them anywhere unless actively signing in.
- Review recent activity for Microsoft accounts owned to check for unusual sign-ins or attempts. If unusual activity is found, follow the guidance to secure the account (change password, review security info, etc.).
- If messages continue and were not requested, follow Microsoft’s guidance on keeping the account secure and on handling unrequested verification codes.
- General safety guidance
- Microsoft will not proactively contact users with unsolicited technical support via SMS.
- If unsure whether a message is genuine, do not click links; instead, go directly to the Microsoft account site by typing the address into the browser.
References: