A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Follow these steps immediately to try to recover the Microsoft account and secure all devices:
- Clean malware from the PC
- Before doing anything with passwords, run a full antivirus scan.
- On Windows 10/11, open Start → search for Windows Defender (Microsoft Defender) and follow the prompts to turn on protection and run a full scan.
- Ensure real-time protection and regular automatic scans are enabled.
- Use the official hacked-account troubleshooter
- Go to the official guide for hacked or compromised accounts and start the sign‑in helper tool: it will ask for the hacked email/phone and then guide through self‑help or connect to an agent if available.
- Reference: How to recover a hacked or compromised Microsoft account.
- Try to reset the password
- If sign‑in is still possible, immediately change your password to a strong, unique one.
- If sign‑in is not possible because the alias/email was changed, use the standard password reset flow: reset your password.
- If password reset fails, submit the Microsoft account recovery form
- Use the Account recovery form.
- Complete it from a device and location previously used with this account (for example, the PC that was already signed in), as recommended in Help with the Microsoft account recovery form.
- Provide as much accurate information as possible: old passwords, the original Gmail address, approximate creation date, Xbox/Store usage, and any other details requested.
- Check email (including junk/spam) for the result. If denied, adjust answers and resubmit; it can be submitted multiple times.
- Understand the limits if security info was replaced
- If the attacker has changed the primary alias and removed/replaced all security info, and the recovery form is not accepted, there is no other supported method to regain access. Microsoft Support and forum moderators cannot override or bypass the automated recovery system.
- This is confirmed in multiple official responses: once security info is replaced and recovery fails, the account is considered unrecoverable.
- After (or if) access is restored
- Review account settings: connected accounts, forwarding, and automatic replies to ensure nothing malicious remains.
- Add additional sign‑in methods on the Advanced security options page (extra email/phone, Microsoft Authenticator) so recovery is easier in the future.
- Avoid downloading executors, cheats, or scripts from untrusted sources, and avoid staying signed in on shared/public devices.
If the recovery form continues to fail even with correct and detailed information, the account cannot be recovered and a new Microsoft account will be required.
References:
- How to recover a hacked or compromised Microsoft account
- Help with the Microsoft account recovery form
- How to help keep your Microsoft account secure
- My account got hacked - Microsoft Q&A
- Need help with hacked microsoft account - Microsoft Q&A
- hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
- my microsoft account has been compromised - Microsoft Q&A
- Entraron a mi cuenta de microsoft y cambiaron el gmail y contraseña - Microsoft Q&A