Managing personal Outlook.com account settings, security, and privacy
Because the attacker changed the sign-in alias and removed the original email, the original Microsoft account is likely no longer directly accessible through normal sign-in. Recovery options are limited and fully automated, but the following paths are available:
- Use the Sign‑in Helper and hacked‑account guidance
- Start with the Sign‑in Helper, which is designed for cases where the account seems hacked or “does not exist”:
- Follow the steps in the hacked/compromised account guide:
- Try standard sign‑in recovery first
- Go to the password reset page and try all possible usernames/aliases (old email, phone, Skype name) that might be tied to the account:
- If the message “We couldn't find an account with that username” appears, double‑check:
- Correct domain (.com, .co.uk, etc.).
- Spelling of the name part of the email.
- Any other alias or phone number that might have been on the account.
- If still not found, use the “Contact support” option from that article:
- Submit the Microsoft account recovery form If normal reset fails, use the account recovery form:
- Follow the guidance here before and while filling it out:
- Key points from the guidance:
- Use a device and location previously used with the account if possible.
- Provide a working contact email (can be any account you control) for Microsoft to reply to.
- Answer as many questions as possible with accurate details (old passwords, services used, etc.).
- Understand the limits of recovery in hacked scenarios Community and support guidance for similar hacked‑account cases states:
- Account recovery is automated; even Microsoft Support cannot override the result of the recovery form or manually restore access.
- If the attacker has changed core account data (primary alias, security info) and the recovery form is not successful, the account is generally considered unrecoverable.
- This applies even when:
- The original email was removed and replaced.
- Two‑step verification or new security info is under the attacker’s control.
- If the recovery form fails For hacked accounts where the alias and security info were changed and the form is repeatedly denied:
- There is no additional backend/manual recovery path documented; the account is effectively lost if the automated checks cannot verify ownership.
- For Xbox/Minecraft or other linked services, separate support channels (for example, Minecraft support) may be able to advise on service‑specific options, but they cannot bypass Microsoft account ownership checks.
In summary, the only supported options are:
- Use the Sign‑in Helper and hacked‑account article.
- Attempt standard password reset with all possible aliases.
- Submit the Microsoft account recovery form with maximum accurate detail. If those fail due to the attacker’s changes, the original Microsoft/Xbox account cannot be recovered according to the provided guidance.
References:
- Help with the Microsoft account recovery form
- Help with "phone number is already used" in a Microsoft account
- My username and password have stopped working
- How to recover a hacked or compromised Microsoft account
- Hello , welcome to Account help & learning
- My account got hacked. - Microsoft Q&A
- Account hacked - Microsoft Q&A
- My account got hacked - Microsoft Q&A
- Need help with hacked microsoft account - Microsoft Q&A
- How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A