Microsoft Security | Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Account got hacked
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(99.2, 89%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOE%3C/text%3E%3C/svg%3E)
Ondřej Bernard
0
Reputation points
Can anyone please tell me what can I do if my account got hacked? The hacker also used the verifying application and set 2 step verification on my account, which I didnt use before, so my attempts to reset password using a different email and submitting information such as my old passwords or an xbox nickname, turned out useless. When I tried it, I got email from Microsoft saying specifically: "Since you have turned on two-step verification for your account, we will ignore these requests, but we wanted you to know".
User support chat is not availible either. What can I possibly do, or who do I reach to for help?
Microsoft Security | Microsoft Authenticator
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Carolyne 1,151 Reputation points Microsoft Employee2026-06-17T09:01:48.0233333+00:00 Hi Ondřej,
I'm sorry to hear about your situation. When a hacker enables two-step verification on your account, the standard recovery form is bypassed.
Submit the account recovery form from a device/location you previously used to sign in: Go to https://account.live.com/acsr (https://account.live.com/acsr) and fill it out as completely as possible. Even though you received that email about 2FA blocking requests, the recovery form is a separate process — submit it multiple times if needed, providing billing details, recent email subjects, and contacts from your address book to strengthen your claim.
Sign in to comment
Sign in to answer