A reader is concerned about some recent emails:

“I have gotten two e-mails, from 2nd parties, with updates for Windows. Since I have have not been able to verify that they are indeed from Microsoft I haven’t opened and installed their contents. I do hope that if Microsoft is using 2nd parties to send out updates that there is some way to easily identify them as authorized parties.”

You’re right to be concerned. Microsoft doesn’t send out updates via email with clickable links. Updates for Windows devices are delivered through the Windows Update Center on your PC. If you’re running Windows 10, those updates come automatically.

In Windows 8.1 and 7, the updates¬†come automatically if automatic updates are turned on. If not, just type Windows Update in your search box and click on the result. You can then check for any updates. You’ll NEVER install Windows update by clicking on a link in an email.


If it claims to be a Windows update and requires you to click on a link, it’s simply a phishing scam that could lead to your PC being attacked by ransomware. It is possible you might receive notifications for software or firmware updates to components of your PC or peripheral devices. These would NEVER say they are Windows updates. They would specifically tell you what device or piece of equipment the update is for. If you do indeed have that device, you could either search for updates using Device Manager or go to the website for the product. And I mean, go look up the website on your own.¬† Don’t click on any links in that email.