Last week I received a couple of authentic looking emails that said Microsoft would be closing my email account. I was suspicious first, because part of the sender's address after the "Microsoft" part was odd, like sidarthagrubergarbage or such.
And in very tiny print at the bottom of the 2nd it stated I had to respond quickly or my service would be terminated by January 31, 2017!
It appears they had copied a real Microsoft mail someplace, then added their special link for scamming. GRRRRRRRR!