That sounds like straight up scammer behavior. "Yes, this is Microsoft calling. We need to confirm your info with the local authorities."
Microsoft reached out to the police department, then the person went to the local police department to verify who they were. I don't see how this could be a scam.
It’s been done before: https://krebsonsecurity.com/2022/03/hackers-gaining-power-of...