Suspicious Email - Deactivation due to inactivity

Hi, @Esther Lawrence 

Reporting it to your security team first was exactly the right move. What is worth knowing:

Yes, Atlassian does send legitimate emails like this. Atlassian accounts that haven't been used for an extended period get an inactivity notice before deactivation. So the email type itself is real, not automatically phishing.

Why you'd get one while actively using Jira: the inactivity check applies to a specific Atlassian account (email address), not to you as a person. Maybe you occasionally created one more atlassian instance using your email. It's a very common situation.

How to verify safely, without clicking anything in the email:

1. Check the sender domain and have your security team look at the headers (SPF/DKIM). Legitimate Atlassian notices come from atlassian.com domains.
2. Open a browser manually and go to id.atlassian.com, log in with the address the email was sent to. If the account is active and works, you've satisfied the "log in" requirement anyway, with zero risk.
3. If anything still looks off, raise a ticket at support.atlassian.com (as @Arkadiusz Wroblewski suggested) and attach the email with headers, Atlassian can confirm whether it originated from them.

One reassurance: even if an unused account did get deactivated, deactivation of a personal Atlassian account doesn't delete your organization's Jira site or data, and accounts can be reactivated by logging in or via an admin.

Hello  

I am going to contradict something that @Evgenii  said.

These deactivation emails usually are about a Subscription/site, not an individual user's login account. 

Atlassian has a policy about deacyivating inactive Free product subscriptions. I don't believe that they have a policy about deactivating individual user login accounts.

The email should include a site URL and identify the project (i.e. Jira) that has been inactive. Is that the same site/product you are regularly using?

The emails are sent only to users who are Organization Admins or Billing Contacts for the specified site and product. Have you ever set up a subscription for the specified product? You should be able to login to https://admin.atlassian.com and see any Organization for which you are an Organization Admin.

Hello @Esther Lawrence 

Please Open an Ticket under support.atlassian.com 

We are community members and cannot really answer that.

Yes, overall these emails are mostly legitimate, but you should clarify with support why you are getting these emails even when you are active.

Best,

Arek 🤠