Terrible service

Follow these steps immediately to secure and recover the Microsoft account:

1. Scan all devices for malware
   • On Windows 10/11 or 8.1, use Windows Defender (built in):
     1. Select Start.
     2. Type Windows Defender in Search, or select Windows Defender.
     3. Make sure protection is turned on and run a full scan.
   • Ensure any other antivirus is fully updated and run a full scan on every device used to sign in to the account.
2. Use the official hacked/compromised account recovery flow
   • Go to the official guide: How to recover a hacked or compromised Microsoft account.
   • Use the sign-in helper tool (Start button in the article). It will:
     • Ask for the email address or phone number.
     • Provide self-help steps or options to talk to an agent, depending on the situation.
3. Change or reset the account password
   • After confirming devices are clean, sign in and change the password using the link in the article.
   • If sign-in is not possible, use the reset your password link from the same article.
   • Choose a strong, unique password not used on any other site.
4. Check and repair account settings
   • Because a compromised account’s settings may have been altered, review:
     • Connected accounts
     • Forwarding
     • Automatic replies
   • Remove any unknown addresses, rules, or replies that were not set up intentionally.
5. If recovery keeps failing
   • Use the sign-in helper tool again from a familiar device and network and provide as much accurate information as possible.
   • If the recovery web form ultimately fails and security info has been replaced, there is no alternate supported method to regain access to a consumer Microsoft account.
6. Monitor for further suspicious activity
   • Watch for unusual sign-in attempts or messages.
   • Inform contacts that the account was compromised so they can ignore suspicious emails that may have been sent from it.

References:

• How to recover a hacked or compromised Microsoft account
• Hello , welcome to Account help & learning
• Respond to a compromised cloud email account