Managing personal Outlook.com account settings, security, and privacy
Immediate steps within Microsoft’s ecosystem can help reduce further damage, but legal protection and local law enforcement must be involved in parallel.
- Secure Microsoft account access
- Use a clean device (one that the ex has never used) and a private network if possible.
- Go to the Microsoft account recovery/sign-in helper and follow the guided process to secure or recover the account: use the “Start” tool in How to recover a hacked or compromised Microsoft account. This tool can route either to self-help or a support agent depending on the situation.
- Once access is regained:
- Change the account password to a strong, unique password.
- Review and update security info (phone, alternate email) so only trusted details are present.
- Sign out of all sessions and devices from the account security page.
- Treat this as identity theft and account compromise
- Follow the identity theft guidance steps:
- File a police report and keep a copy to show that the account owner is a victim, not the perpetrator.
- Put a fraud alert on credit reports (if in a supported region) so new credit cannot be opened without approval.
- Close or secure any accounts that have been accessed or opened fraudulently and use new passwords/PINs.
- Report the identity theft to the appropriate national authority where applicable (for example, the FTC in the U.S. via the link in the guidance).
- Report suspicious or fraudulent incidents involving Microsoft services using the abuse/scam reporting options described in the guidance.
- Follow the identity theft guidance steps:
- Use Microsoft’s hacked-account guidance thoroughly
- Work through the full process in How to recover a hacked or compromised Microsoft account, including:
- Scanning all devices for malware.
- Resetting the password.
- Reviewing mailbox rules, forwarding, and automatic replies to ensure emails (for example, from lawyers) are not being auto-deleted or forwarded.
- Work through the full process in How to recover a hacked or compromised Microsoft account, including:
- Document everything
- Keep copies of:
- Screenshots of suspicious activity (unknown devices, sign-ins, files, programs, or emails).
- All communication with Microsoft Support and any other providers.
- Police reports and any fraud/identity theft reports.
- This documentation can help demonstrate to courts and authorities that the account owner is a victim of account takeover and identity abuse.
- Keep copies of:
- Contact Microsoft Support directly
- If self-service recovery is not enough, use another or new Microsoft account (if necessary) to contact support as described in Get help with your Microsoft account and Get help with your Microsoft account (account dashboard article):
- Start from the “Can’t sign in” guided tool to route to the correct support path.
- For more complex issues, use the “Contact Support” flow (chat or call-back) described in the Q&A guidance to reach an agent who can review the situation and advise on account security.
- If self-service recovery is not enough, use another or new Microsoft account (if necessary) to contact support as described in Get help with your Microsoft account and Get help with your Microsoft account (account dashboard article):
- If OneDrive content is involved
- Once the account is secured, review OneDrive activity and permissions.
- If there are issues beyond self-service control, use the OneDrive support/contact options referenced in OneDrive issues with BT Web Protect (Contact Support section) to reach Microsoft technical support.
- Legal and safety actions (outside Microsoft)
- In parallel with the above, contact local law enforcement and legal counsel immediately and provide:
- Evidence of account compromise.
- Identity theft reports.
- Any proof that another person has been controlling the accounts and impersonating the account owner.
- Ask legal counsel to inform the court that there is an ongoing digital identity/forensic issue and that the accounts have been compromised.
- In parallel with the above, contact local law enforcement and legal counsel immediately and provide:
These steps help secure Microsoft accounts and document that the account owner is a victim of identity theft and account compromise, which is critical for both technical remediation and legal defense.
References: