Managing personal Outlook.com account settings, security, and privacy
For a hacked Microsoft/Outlook.com account where the attacker has changed the security email and recovery keeps getting denied, only the official self‑service recovery and hacked‑account process can be used; no one on forums or standard support can manually override it.
Follow these steps end‑to‑end:
- Clean all devices first
Since the hack started after malware infection, run a fully updated antivirus and perform a full scan on every PC/phone/tablet used with this account. If using Windows 10/11 or 8.1, turn on and run a full scan with Windows Defender as described in the article. Do this before attempting more recovery so the attacker cannot keep capturing new passwords. - Use the hacked/compromised account guide
Go through the official “How to recover a hacked or compromised Microsoft account” flow. The page includes a sign‑in helper tool that, after entering the affected email or phone, will either show self‑help options or offer a way to talk to an agent. Use that tool every time; it is the supported path for hacked Outlook.com/Microsoft accounts. - Submit the account recovery form carefully
If normal sign‑in sends codes only to the attacker’s disposable email, use the account recovery form instead of the usual verification prompts. When filling it out:- Use a device and network you commonly used with the account.
- Provide as many details as possible: old passwords, subject lines of emails sent, contacts frequently emailed, approximate dates of account creation, and any billing details ever used with the account.
- If a request is denied, wait for the lockout period to expire, then submit a new form (using an InPrivate/Incognito window and, if possible, a different device or network) with more complete information.
- Understand the limitation if security info was replaced
If the attacker has fully replaced the security information (alternate email, phone, and verification methods) and the recovery form cannot verify ownership, there is no other supported method to regain access. Microsoft support agents cannot bypass or override the automated recovery checks for consumer Microsoft accounts. - If access is regained
- Immediately change the password to a strong, unique one.
- Review and remove any unknown connected accounts, forwarding rules, and automatic replies in Outlook.com.
- Enable two‑step verification and update security info to trusted email/phone only.
- Keep antivirus protection enabled and updated.
If repeated, fully detailed recovery attempts continue to be denied, the account is effectively unrecoverable and a new Microsoft account will be required. Use the hacked‑account article and sign‑in helper as the authoritative guidance.
References:
- How to recover a hacked or compromised Microsoft account
- Hello , welcome to Account help & learning
- My account got hacked - Microsoft Q&A
- My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
- hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
- Entraron a mi cuenta de microsoft y cambiaron el gmail y contraseña - Microsoft Q&A