The short answer

Open the service through your own app or bookmark. Check for security alerts and recent sign-ins there. Do not enter a password or verification code through a link in an unverified warning email.

Take the warning seriously, but choose your own route

A sign-in warning could be real, yet the same story can lead to a copy of the login page. Investigate through the genuine service instead of ignoring the claim. A countdown or threat of deletion does not make the sender more credible.

Check the real account

  1. Review recent sign-ins and connected devices.
  2. Look for changes to recovery email addresses or phone numbers.
  3. End unfamiliar sessions and change the password through account settings if access looks suspicious.
  4. If locked out, use the provider's official recovery process.

Unexpected codes are worth attention

Do not share an unrequested sign-in code or approve an unfamiliar prompt. Someone may be trying to sign in, or another person may have entered your address by mistake. Repeated requests warrant a direct account check. A caller claiming to need the code to ‘stop an attack’ is not a reason to disclose it.

The key point

Investigate a security warning inside the real account, not through the warning email's login link.

Sources and further help

The linked information supports this guide. It does not imply that these organisations work with or endorse MailMigo.