This has nothing to do with Microsoft - or the IRS, or a Nigerian Bank or a EU lottery - THEY ARE NOT REAL. Anytime you get a call or an email from ANY business that is requesting info, hang up and go directly to your account or to their website. If they are trying to contact you, you will have a notification or message on your account page. If it is an email DO NOT OPEN IT, that gives them access. Just respond as 'phishing' (look at either your junk link or your respond link, you will see a phishing link). While playing with them might be fun, they don't care. When I get a 'real' phone solicitor and they won't take no, I simply set the phone down and let them talk away. Sooner or later they realize I'm not there and hang up. At least I have used up their time and maybe saved another person from a phone call.