How do I get back my compromised account?

Bao Nguyen 5 Reputation points
2026-04-27T02:18:02.46+00:00

It's late,I get it.

I got an microsoft account which my friend gave me and it got compromised.

They add some Taiwan account and email,and then hacked it somehow and now I'm looking for ways to getting it back.

I still have the original security email from that account that the hacker probably took it out.897583

Outlook | Web | Outlook.com | Account management, security, and privacy

Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

3 answers

Sort by: Newest
  1. Hornblower409 14,690 Reputation points
    2026-08-04T07:54:22.1233333+00:00

    @Ultra_Voltage said

    [Account Recovery Form] doesn't work if the email that has been hacked has 2-step verification

    Unfortunately you are correct. Your only other option, if you can complete one of the verification methods is an Account Security Reset.

    If you can complete one verification step for your account (e.g. password), but can't access any of the other verification methods, and have repeatedly failed the Account Recovery process, or can't use Account Recovery because your account has Two-step Verification (2FA, MFA), then you can try to request that all the verification methods be replaced.

    This will put your account in a 30 day "Pending Request" state. You will have limited access to the account during this period or no access at all if the account has Two-step Verification enabled.

    See the Answer by "Hornblower409 Jun 25 2026" in
    https://learn.microsoft.com/en-us/answers/questions/5920985/how-to-fix-we-will-send-a-verification-code-to-(mo

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  2. Lester Bernard Reyes 84,725 Reputation points Independent Advisor
    2026-04-27T02:53:13.83+00:00

    Hi, I'm Bernard. I'm happy to help!

    To recover the account, kindly follow the steps below:

    Method 1. Recover a Microsoft account by resetting the password:

    Go to this link: https://go.microsoft.com/fwlink/?linkid=2273955 and follow the prompt to reset the password.

    For reference: https://support.microsoft.com/en-us/account-billing/reset-a-forgotten-microsoft-account-password-eff4f067-5042-c1a3-fe72-b04d60556c37

     

    Method 2. If you cannot reset the password or are unable to verify the account, I recommend submitting a recovery form:

    https://account.live.com/acsr

    Please complete the form and expect a reply within a couple of days.

     

    Was this answer helpful?

    2 people found this answer helpful.
  3. AI answer

    2026-04-27T02:18:39.51+00:00

    Use the official hacked-account recovery flow. For personal Outlook.com / Microsoft accounts there is no manual override; recovery is fully automated.

    1. Start with the hacked/compromised account guide and sign‑in helper
      • Go to the hacked-account troubleshooter: How to recover a hacked or compromised Microsoft account. It will ask for the compromised email/phone and route to self‑help or an agent if available.
      • From there, follow the path for “I think someone else is using my Microsoft account”.
    2. Try to sign in and use “Forgot my password”
      • On the Microsoft sign‑in page, enter the compromised address.
      • Select Forgot my password, then choose I think someone else is using my Microsoft account.
      • Complete the steps to reset the password using any security info that still belongs to you (old security email, phone, etc.).
    3. If sign‑in reset fails, use the account recovery form
      • If normal reset does not work because the hacker changed the security info, fill out the account recovery form linked from the hacked-account article.
      • Use a device and location that were commonly used with that account.
      • Provide as much detail as possible: old passwords, subject lines of emails sent, contacts, and any billing info that originally belonged to the account owner.
      • If the form is rejected, wait and try again later from a familiar device/network; there is no other supported way to regain access if the form repeatedly fails.
    4. If you regain access
      • Immediately change the password to a strong, unique one.
      • Review and remove any unknown aliases, forwarding rules, and connected accounts.
      • Add your own secure verification methods (new email, phone, Microsoft Authenticator) and enable two‑step verification.
    5. If recovery keeps failing
      • When the attacker has fully replaced the security info and the recovery form cannot verify ownership, the account is considered unrecoverable for security reasons, even if the original security email still receives notifications.
      • In that case, create a new Microsoft account and secure it from the start with strong password and multifactor authentication.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?