Security notification for an old account I cannot access

Because the account is compromised and you cannot sign in or use the listed recovery options, only Microsoft’s automated recovery and security systems can act on it. There is no direct way to request manual deletion of a consumer Microsoft account that you cannot access.

Use these steps to minimize risk and attempt to regain control so the account can be secured or closed:

1. Confirm the account and try standard recovery
   • Go to the Microsoft sign-in page and choose Forgot my password.
   • When prompted, make sure the username (email and domain like .com vs .co.uk) is exactly correct, as described in My username and password have stopped working.
   • If the email isn’t recognized, try any other alias or phone number that might be on the account.
2. If the account is locked or blocked
   • If you see that the account is locked due to suspicious activity or too many incorrect attempts, follow the on-screen instructions.
   • If there is an aka.ms/ link in the lock message, select it and complete the form to request account reinstatement, as described in Microsoft account has been locked. A support agent will review it and contact via email.
3. If you can’t use the listed security info
   • If the only recovery option shown is a Hotmail address you no longer control and you don’t recognize other security info, follow the guidance in Common problems with two-step verification for a work or school account:
     • Double-check that the email address is typed correctly and the domain is correct.
     • If sure the address is correct but the recovery options are wrong or inaccessible, use the account recovery process.
4. Use the Microsoft account recovery form (if standard reset fails)
   • If password reset and normal verification options fail, use the account recovery form as described in Help with the Microsoft account recovery form.
   • Provide a working email (such as the Gmail that receives the alerts) where Microsoft can contact about the request.
   • Fill in as much accurate historical information as possible (old passwords, contacts, subject lines, etc.) to prove ownership.
   • Microsoft will review and respond, typically within 24 hours.
5. If recovery ultimately fails
   • If the automated systems cannot verify ownership, support agents are not allowed to override them or manually reset/delete the account for security reasons, as outlined in the recovery-form guidance.
   • In that case, the account cannot be accessed or manually deleted, but the attacker’s ability to use it is limited by Microsoft’s security systems (lockouts, unusual sign-in detection, etc.).
   • If the account has been inactive for a long time, note that Microsoft permanently deletes accounts that have not been accessed for 2 years, as described in the Q&A about attempting to access an old email.
6. Mitigate any remaining risk
   • Treat the old account as compromised:
     • Watch for phishing emails sent to the Gmail address referencing that Microsoft account.
     • If any other services were ever linked to that old Microsoft address, update those services to use a current, secure email and password.
   • For current Microsoft accounts that are still in use, enable strong passwords and two-step verification and keep recovery info up to date.

There is no supported path in the provided guidance to request deletion of a consumer Microsoft account without first successfully proving ownership through the automated recovery mechanisms.

References:

• My username and password have stopped working
• Microsoft account has been locked
• Common problems with two-step verification for a work or school account
• Help with the Microsoft account recovery form
• Attempting to access old email - Microsoft Q&A