Hi Charli Fii,
My name is RY, I'm an Independent Advisor and a Microsoft user like you.
The email you received is not legitimate. That's absolutely a phishing scam message. Microsoft doesn't send out messages like that.
Please make sure that you do NOT click on any link inside of the message and if you ever did, make sure that you never any information that is asked of you.
To report a phishing or spoofing scam, please follow the steps:
1. In the message list, select the message or messages you want to report
2. Above the reading pane, select Junk > Phishing > Report to report the message sender
You may refer on this article for more details:
https://support.microsoft.com/en-us/office/how-...
Also, thank you so much for bringing this up to Microsoft Community to warn about scam or phishing email.
Please let me know if you have other questions or concerns.
Regards,
RY