Is this a genuine email or a scam?

Well I’m not positive but it sounds fishy to me. Don’t click the link in the email. You can sign in to your MS account on the website and look for any notifications about this feature.

Looks fishy to me too. Just looked in my account and Team account and I do not have any notifications. So I'll rake this email as a scam and I will ignore it and delete it.

Thank you @SoFine409

- - - Updated - - -

If anyone knows how to check the email header for any clues here is the header;

Code:

Received: from AM7PR09MB3863.eurprd09.prod.outlook.com (2603:10a6:20b:117::22)
 by DB8PR09MB3580.eurprd09.prod.outlook.com with HTTPS; Sun, 19 Sep 2021
 19:02:08 +0000
Received: from AS8PR04CA0163.eurprd04.prod.outlook.com (2603:10a6:20b:331::18)
 by AM7PR09MB3863.eurprd09.prod.outlook.com (2603:10a6:20b:117::22) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4523.16; Sun, 19 Sep
 2021 19:02:07 +0000
Received: from VI1EUR05FT044.eop-eur05.prod.protection.outlook.com
 (2603:10a6:20b:331:cafe::6c) by AS8PR04CA0163.outlook.office365.com
 (2603:10a6:20b:331::18) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4523.16 via Frontend
 Transport; Sun, 19 Sep 2021 19:02:07 +0000
Authentication-Results: spf=pass (sender IP is 68.232.192.175)
 smtp.mailfrom=bounce.email.microsoft365.com; hotmail.co.uk; dkim=pass
 (signature was verified) header.d=email.microsoft365.com;hotmail.co.uk;
 dmarc=pass action=none header.from=email.microsoft365.com;compauth=pass
 reason=100
Received-SPF: Pass (protection.outlook.com: domain of
 bounce.email.microsoft365.com designates 68.232.192.175 as permitted sender)
 receiver=protection.outlook.com; client-ip=68.232.192.175;
 helo=mta.email.office.com;
Received: from mta.email.office.com (68.232.192.175) by
 VI1EUR05FT044.mail.protection.outlook.com (10.233.243.7) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.4523.14 via Frontend Transport; Sun, 19 Sep 2021 19:02:06 +0000
X-IncomingTopHeaderMarker:
 OriginalChecksum:79BC7CA8E5DAB535A0346AFA446450A6127E8A80245B7172DDB24AE95A6A38D7;UpperCasedChecksum:E3A98AE2BDBB400BCAB516B48C50522DDB931545120AECA0A5906C8F3C851921;SizeAsReceived:1556;Count:16
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=200608; d=email.microsoft365.com;
 h=From:To:Subject:Date:List-Help:MIME-Version:Reply-To:List-ID:
 X-CSA-Complaints:Message-ID:Content-Type;
 i=Microsoft365@email.microsoft365.com;
 bh=fQHFieOK/wdHy2JqSuJBXylZ5y1ZorbU9MG0rcDNW3E=;
 b=JNl9VEkZgBX4Evne1SJIBBQpeCb6oqt1hrC0K0cfIkoGuPvoIom0wY7w4sz0JOV43svgpZul4QGT
   qB24J3fh2AJBWOjM1EzAfaLsM/Wmvc71+vWAqXzjBi1YJPKaa6d4mqHYhO+cygDYegkpIhryiX1Q
   qqOQRs8s0pU0s8Qa5ng=
Received: by mta.email.office.com id h8u4is2fmd4v for <xxxxx@hotmail.co.uk>; Sun, 19 Sep 2021 19:02:05 +0000 (envelope-from <bounce-810_HTML-707060159-1415094-1070564-2002@bounce.email.microsoft365.com>)
From: "Microsoft 365" <Microsoft365@email.microsoft365.com>
To: <xxxxx@hotmail.co.uk>
Subject: Sign in to keep using the free version of Teams
Date: Sun, 19 Sep 2021 13:02:04 -0600
List-Help: <https://click.email.office.com/subscription_center.aspx?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJtaWQiOiIxMDcwNTY0IiwicyI6IjcwNzA2MDE1OSIsImxpZCI6IjgxMCIsImoiOiIxNDE1MDk0IiwiamIiOiIyMDAyIiwiZCI6IjQwMTE4In0.6rQeWF5Zo2PipJh8kUiRRNfUfXXRmIBTrTDuSoYpcI0>
x-CSA-Compliance-Source: SFMC
MIME-Version: 1.0
Reply-To: "Microsoft 365 Reply" <reply-fe9715747461047471-810_HTML-707060159-1070564-2002@email.office.com>
List-ID: <1070237.xt.local>
X-CSA-Complaints: csa-complaints@eco.de
X-SFMC-Stack: 4
x-job: 1070564_1415094
Message-ID: <b13c9808-964d-4c5c-9999-2258c371c432@las1s04mta955.xt.local>
Content-Type: multipart/alternative;
                boundary="RjNev2vVr9FS=_?:"
X-IncomingHeaderCount: 16
Return-Path:
 bounce-810_HTML-707060159-1415094-10...crosoft365.com
X-MS-Exchange-Organization-ExpirationStartTime: 19 Sep 2021 19:02:07.0542
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 438d91b2-9a32-460d-e9b1-08d97b9ff9cb
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-Exchange-Organization-AuthSource:
 VI1EUR05FT044.eop-eur05.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-UserLastLogonTime: 9/19/2021 5:03:01 PM
X-MS-Office365-Filtering-Correlation-Id: 438d91b2-9a32-460d-e9b1-08d97b9ff9cb
X-MS-TrafficTypeDiagnostic: AM7PR09MB3863:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 68.232.192.175
X-SID-PRA: MICROSOFT365@EMAIL.MICROSOFT365.COM
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-MS-Exchange-AtpMessageProperties: SA|SL
X-MS-Exchange-Organization-SCL: 0
X-Microsoft-Antispam: BCL:3;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Sep 2021 19:02:06.5215
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 438d91b2-9a32-460d-e9b1-08d97b9ff9cb
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource:
 VI1EUR05FT044.eop-eur05.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR09MB3863
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.8106785
X-MS-Exchange-Processed-By-BccFoldering: 15.20.4523.018
X-Message-Info:
5vMbyqxGkdfaxZpZmArUlc+/ANVOLIAK50pdyRkwMLroAqs70SCPItMNrXuzI/qRRY1Q4xyZs3Qx+zaOP8DWUX/oijCPYMr5U1YHQKwlFA+XhsbDK3ndErdsTKA8u04AXFZ8Lm2LbruWYEFeEFCbXtyj58PKL9dBTgSAuM21z7rfd8fpK4nbJ5JR5PwrD5RSd0VXyl9+X32vxbdrMgsMAw==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;auth:1;dest:I;ENG:(5062000284)(90000117)(90012020)(91020020)(91040095)(5061607266)(5061608174)(9050020)(9100336)(4900116)(98391011)(4910003)(9560001)(4920091)(6250099)(4950132)(4990091);
X-Microsoft-Antispam-Message-Info:
                =?us-ascii?Q?cjxTHChrWG0LofGdfYNo7lja4V8+ud8nwv2wgdfRHFHVbh5Xp6GvHqY306Yo?=
 =?us-ascii?Q?+iqMpbL5yNKMSbY0AiSMeVA0rdhtFxl0mWTA14NgEqdXoqSCGeFgQBdgl/wL?=
 =?us-ascii?Q?U4z3ueZJidKrh0ggmRXFO1IU2h2vUUjZiwEAfcW62H5FLxoXyMWVM3X40Gb6?=
 =?us-ascii?Q?dYHhkG0Ww25PCvTD465qa/ttdok53LXaWqVCXk22PTSuJBW19X328cQLtDv8?=
 =?us-ascii?Q?CIU5Tkuj7puL9oZiC+bi8pDSYvGCMpikRZmM3CNoezgLQIPLmkOgLlpB1b+z?=
 =?us-ascii?Q?6MN+eY16wmrwPTv0CABjZnjVMhgLsb/AwWt7EPc7xveK5IujwrBaGFKmi7pa?=
 =?us-ascii?Q?Xz5zMQYZgsOdW45//PsAY5bFFkrjjs6V6O2VAtV4LiLQ84LT5/LyboEg7Kgw?=
 =?us-ascii?Q?P3PgKbZFGdBCwunXDbUz36IuX7XM1XC+jycqpXuWrJkmi2KPLFxB0mBM449O?=
 =?us-ascii?Q?N9oRkHPVB5r6t4gaF4swzcb5VnFIX+gnHRyU3u2cIgyOv4F6KWb78lKXKfA5?=
 =?us-ascii?Q?cKURm9DiuCHi5UbogoJEX8ZWiEQ6l4dZx2DnUdvXEIc//zfvg4lk0YvZSngp?=
 =?us-ascii?Q?AdLmWd2gyvBJAHS2C6X+Lmi/mkkcXuSpQ393M3M+FsV7v/6Fu7vPg0VTvf9+?=
 =?us-ascii?Q?9IRf/nydTMidqPZ1P7q7GAiVbO5r24oKuvKzAGUi6dJ/janKEz/BNkA3EF0l?=
 =?us-ascii?Q?7GpaPKKX1D0JtwIRqDVQih2SOJ2xiJf8TX7FMR2Ybj3+LVSP1f6yMytZlhDm?=
 =?us-ascii?Q?cJttn8SBDpyxQJDPW9VqIS9UcC3Evj1BiZ7BzJL7iIpAtaKRRT7gJMUc558Z?=
 =?us-ascii?Q?KOGnJkUrZtLXbQQ27W2obo/8VmQLTFfs+hr97noadbj0f1suOKKhR/llBWwa?=
 =?us-ascii?Q?Nl18crjtmcJAljtFFHFMPavxzKw+qLi5cYb1Q7GRGK6agYyz+gH4KPKi/hUi?=
 =?us-ascii?Q?pdVWFrExT2SlO0JEboRwW+Rnr0ClmWexbWVmhsCFGEqkCamh9HNG221mH/nx?=
 =?us-ascii?Q?zF5qnwgz3KchZzuq+p0Lt0l8/jCBKOqjOJAGNOEcj6Wq2Or4tK0Ypld4krJr?=
 =?us-ascii?Q?LhKmb/RZzAV6WK94bL3uKeRVL4tc8xxuFxM9K0TB2VrBU9lBR+t0u7jwtcAH?=
 =?us-ascii?Q?TiTaf/bi7dV3TSr6JWZN95mz4LmIDBGXCYn2bYh0vC0a0g4XF8Endm4yk4uG?=
 =?us-ascii?Q?56wX+DrGBJirWRkk0IulmfwnUqzI19j8u/KDG18/CuTaKf/KhQ6dXD3dI8bi?=
 =?us-ascii?Q?sg7XSgK/81dT8Vps4QG4Ms3qkBsl51koP1cOL0eedzIOxE0Azwl1J2hBCknx?=
 =?us-ascii?Q?HmE=3D?=
X-MS-Exchange-Safelinks-Url-KeyVer: 1

scopio said:

Looks fishy to me too. Just looked in my account and Team account and I do not have any notifications. So I'll rake this email as a scam and I will ignore it and delete it....
- - - Updated - - -

If anyone knows how to check the email header for any clues here is the header...

....
From: "Microsoft 365" <Microsoft365@email.microsoft365.com>
....

A Whois lookup confirms that the microsoft365.com domain is registered to Microsoft.

DNS resolution of microsoft365.com points to 13.90.213.204 with a location in Washington, Virginia US. Hosting or network services services are provided on Microsoft Corporation networks via Microsoft Azure.Domain name registration belongs to Microsoft Corporation, registered through Markmonitor, Inc.. The server responds with an SSL certificate issud by Microsoft Corporation under the common name akaoffice.trafficmanager.net.

microsoft365.com Ownership Information and DNS Records

As such, the email would seem genuine. And as you have just signed in to Teams to check, you have already fulfilled the requirement to sign to keep your account active anyway.

It is normal practice for 'free' accounts such as Yahoo mail or Hotmail to be closed after a period of inactivity. Even your Microsoft Account will be deleted after two years of inactivity.

Microsoft said:

...you must sign in to your Microsoft account at least once in a two-year period to keep your account active. If you don’t sign in during this time, Microsoft will consider your account to be inactive....

https://support.microsoft.com/en-us/...2-df852b63699f