Microsoft Account Hacked/Compromised

Follow these steps to address the compromised Microsoft account:

1. Use the official hacked/compromised account flow
   • Go to the Microsoft hacked/compromised account troubleshooter:
     • How to recover a hacked or compromised Microsoft account
   • The tool will ask for the email address or phone number of the compromised account and then guide through self-help or offer a way to contact an agent.
2. Try the account recovery form repeatedly with maximum detail
   • When using the recovery form, enter every piece of information remembered about the account (old passwords, services used, approximate creation date, etc.).
   • If the form reports that the account does not exist and there is no way to proceed, and the alias/security info has been fully replaced by the attacker, community guidance indicates there is no alternative manual recovery path and Microsoft Support cannot override the automated system.
3. If still able to sign in anywhere as that account
   • If any device or app is still signed in as the compromised account, immediately follow the hacked-account guidance to:
     • Scan the device for malware.
     • Change the password using the account’s Security basics page.
     • Review and remove unknown aliases, forwarding, connected accounts, and automatic replies.
4. If the account cannot be recovered
   • If the recovery form and hacked-account troubleshooter both fail and the system treats the account as non-existent or fully transferred, moderator guidance states the account is effectively unrecoverable.
   • In that case, continue using the other Microsoft account, secure all other services (email, banking, etc.), and update any external accounts that previously used the compromised Microsoft account as a sign-in or recovery address.
5. For future protection (for all remaining accounts)
   • Enable multifactor authentication (MFA) on all Microsoft accounts and use Microsoft Authenticator or other secure verification methods.
   • Regularly review recent activity and security info to detect unusual sign-ins early.

References:

• How to recover a hacked or compromised Microsoft account
• What happens if there's an unusual sign-in to your account
• Respond to a compromised cloud email account
• my microsoft account has been compromised - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• My account got hacked. - Microsoft Q&A
• Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
• My account got hacked - Microsoft Q&A