Recovered hacked Microsoft account – cannot change primary email due to security restriction

Hello,

My Microsoft account was compromised and the attacker changed the primary email address on the account. I successfully recovered the account through Microsoft’s recovery process and I am currently able to sign in.

However, I am now blocked from changing the primary email address back to my real and personal Gmail address.

When I try to update my account security information, I receive a message stating that I can’t access this action right now due to security reasons. The account appears to be under a security hold, and I am unable to remove or replace the compromised email address.

Important details:

• The account was hacked, not abandoned.

I regained access through official recovery.

I can sign in normally, but security changes are restricted.

The email currently listed on the account does not belong to me and was added by the attacker.

I do not want to keep the attacker’s email as an alias or recovery option.

My questions:

How long does this security restriction normally last after account recovery?

Is there a way for Microsoft Support to manually verify ownership and remove the unauthorized email address?

What steps are required to fully restore account security after a takeover?

I want to ensure my account is fully secured and returned to my original ownership details.

Thank you.