• "You have won the Microsoft Lottery"
• Microsoft "requires credit card information to validate your copy of Windows"
• Microsoft sends unsolicited e-mail messages with attached security updates
• Someone from "Microsoft Tech Support" calls to fix your computer

Avoid these dangerous hoaxes

We do not send unsolicited e-mail or make unsolicited phone calls to request personal or financial information or fix your computer.

If you receive an unsolicited e-mail message or phone call that purports to be from Microsoft and requests that you send personal information or click links, delete the e-mail or hang up the phone.

You have not won the "Microsoft Lottery"

Microsoft customers are often targets of a scam that uses e-mail messages to falsely promise money. Victims receive messages claiming: "You have won The Microsoft Lottery!" There is no Microsoft Lottery. Delete the message.

If you have lost money to this scam, report it. You can also send the police report to Microsoft and we will use it to help law enforcement catch the criminals who send out these e-mails.

For more information, see Report Microsoft lottery fraud. To help protect yourself from these e-mail hoaxes, you can use the same general guidance that you use to protect yourself from phishing scams to help protect yourself from these e-mail hoaxes.

Microsoft does not request credit card information to validate your copy of Windows

We require that your copy of Windows is legitimate before you can obtain programs from the Microsoft Download Center and to receive software updates from Microsoft Update. Our online process that performs that validation is called the Genuine Advantage Program. At no time during the validation process do we request your credit card information.

In fact, we do not collect information that can be used to identify you such as your name, e-mail address, or other personal details.

To learn more, read the Microsoft Genuine Advantage Privacy Policy. To learn more about the program in general, see About Genuine Microsoft Software.

Microsoft does not send unsolicited communication about security updates

When we release information about a security software update or a security incident, we send e-mail messages only to subscribers of our security communications program.

Unfortunately, cybercriminals have exploited this program. They have sent fake security communications that appear to be from Microsoft. Some messages lure recipients to Web sites to download spyware or other malware. Others include a file attachment that contains a virus. Delete the message. Do not open the attachment.

Legitimate security communications from Microsoft

• Legitimate communications do not include software updates as attachments. We never attach software updates to our security communications. Rather, we refer customers to our Web site for complete information about the software update or security incident.
• Legitimate communications are also on our Web sites. If we provide any information about a security update, you can also find that information on our Web sites.

Microsoft does not make unsolicited phone calls to help you fix your computer

In this scam cybercriminals call you and claim to be from Microsoft Tech Support. They offer to help solve your computer problems. Once the crooks have gained your trust, they attempt to steal from you and damage your computer with malware including viruses and spyware.

Although law enforcement can trace phone numbers, perpetrators often use pay phones, disposable cellular phones, or stolen cellular phone numbers. It's better to avoid being conned rather than try to repair damage afterwards.

Treat all unsolicited phone calls with skepticism. Do not provide any personal information.

If you receive an unsolicited call from someone claiming to be from Microsoft Tech Support, hang up. We do not make these kinds of calls.

If you think you might be a victim of fraud, you can report it. For more information, see: What to do if you've responded to a phishing scam.