[Scam email] I’ve been Hacked email sent from my account!

I have lost my money about 2290 THB from my credit card that I used for pay Office 365.

Hi Simon, team,

I received the very same email this morning and its very scary. I have changed my password and secured my account with the authenticator app in addition to phone + email authentication.

When checking my account login history, I can see over 1000+ unsuccessful attempts to login from various countries. While I understand the attempt was unsuccessful, I am very scared as the email received is from exactly the same email address "removed ******@hotmail.com". I've checked that there are no spaces. Is there anything else I need to do to secure my account please? How is this hacker able to send emails from my own account if the login attempt was unsuccessful?

Cheers,

Riddhima

Exact thing has happened with me. Received the same email and multiple unsuccessful attempts to login from various countries. Have changed the password. Please do know if anything else needs to be done.

Thankyou.

>> How is this hacker able to send emails from my own account if the login attempt was unsuccessful?

They didn't send it from your account.

Dear Riddhima Minocha

Thank you for posting in the Microsoft Community.

You can hide your original account name by changing your primary alias so that hackers don't know what you're logged in as now. So the hacker will get stuck at the Enter Account screen and won't be able to reach the Enter Password or Security Verification screen at all. It won't try to log into your account and show a failure.

• Add a new alias, change this alias to the primary alias. You can add aliases through this link. Add or remove an email alias in Outlook.com - Microsoft Support Notes: Do not delete your original alias.
• Uncheck the original account name in the sign-in preferences so that when you log in using your original account name it will say this account could not be found (The fact is that the account doesn't cease to exist, it's just hidden), so that hackers can't attack using your original account name. But you will have to log in using your new primary alias as well. So you may want to keep your new account name in mind. You can take a screenshot and save it.

Since the recent activity shows that the hacker did not succeed in logging into your account. There is no need to worry too much according to. They just used a special cheat to mimic your email. It looks like you sent it to yourself. In fact, it's not.

I hope that my reply will be helpful to you.

Please feel free to let me know if you have any further updates, thank you.

Best Regards,

Simon - MSFT | Microsoft Community Support Specialist