Microsoft has an 800 number that you can call and they will be able to verify if it is legit or not.